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TITLE OF THE INVENTION 

BROADCAST APPARATUS AND RECEPTION APPARATUS FOR PROVIDING 
A STORAGE SERVICE BY WHICH SCRAMBLED CONTENT IS STORED AND 
DESCRAMBLED USING SCRAMBLING KEY LIST 

BACKGROUND OF THE INVENTION 

(1) Field of the Invention 

The present invention relates to a storage service 
in the digital broadcast or the like, whereby received 
scrambled content is stored and then descrambled as 
required. More specifically, the present invention 
relates to technology for improving performance of the 
service in some particular reproduction modes. 

(2) Descri p tion of the Related Art 

In the current pay satellite digital broadcast system, 
a viewer contracts with a broadcast provider to pay some 
amount of charges to the broadcast provider for viewing 
programs on selected channels. 

Since a broadcasting satellite broadcasts on a number 
of channels, programs on the channels for which a viewer 
does not make subscribing contracts are also broadcast to 
the viewer. The receiver owned by the viewer, then, 
confirms the presence/absence of the subscribing contract 
for each channel and receives only programs on the channels 
allowed to be viewed. Such technology for selecting 
channels to receive programs thereon is called Conditional 



Access (abbreviated as "CA") . 

On the other hand, the transmitter scrambles content 
including audio and visual data of a pay broadcast program 
to be broadcast one each channel, where content per 
predetermined unit is scrambled with a scrambling key 
different for each predetermined unit of contents. The 
transmitter, then, sequentially transmits the scrambled 
content accompanied with an Entitlement Control Message 
(ECM) containing this scrambling key and the scrambling 
key for content in the successive predetermined unit. 
This ECM is encrypted so as to be interpreted only by the 
receivers owned by subscribers to the channel. 

Note that the scrambling key used for scrambling data 
functions as a descrambling key as well for descrambling 
the data. 

Each receiver comes with an IC card used for the 
receiver only, to which an identifying number associated 
with the subscriber is assigned. The IC card has a CPU 
and a memory within it to store contract conditions and 
software for executing CA processes. The data relating 
to the CA processes is completely digitized and contained 
in the IC card, which makes unauthorized viewing difficult 
and therefore provides high levels of security. 

Meanwhile, the service called a "storage service" is 
scheduled to become operational targeted for those who have 
not yet subscribed to a channel so that, once storing 
scrambled content with ECM in the recording media in the 



receivers owned by them, they pay some amount of charges 
for viewing the content to become subscribers, which 
enables them to decode the ECMs so as to reproduce the 
stored scrambled content. 
5 In such a service, when reproducing content in the 

normal reproduction mode, the receiver acquires content 
in the first predetermined unit, and decodes the 
• accompanied ECM to extract the scrambling keys for content 
u in the first and the second units. Then, the receiver 

S 10 descrambles the content in the first unit using the 
:^ scrambling key exclusive to the content. As for the 

O content in the second unit or later, the receiver 

HI 

H sequentially descrambles content in each unit using the 

H scrambling key obtained in the process for the preceding 

f I i? 

H 15 unit. 

W 

q However, when reproducing content by the storage 

service in the particular reproduction modes such as a 
fast-forward reproduction mode and a fast-reverse 
reproduction mode, the receiver cannot descramble content 

20 in each unit using the scrambling key obtained in the 
process for the preceding unit, because the order of the 
reproduction becomes different from that in the normal 
reproduction mode. Therefore, the receiver has to, each 
time acquiring content in a predetermined unit, decode the 

25 accompanied ECM to obtain a scrambling key and descramble 
the scrambled content using the key, which makes it 
difficult to realize a sufficient performance level of the 
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particular reproduction modes, such as fast-forward speed. 

SUMMARY OF THE INVENTION 

The object of the invention is to provide a broadcast 
5 apparatus for offering a storage service, a method and a 
computer program for the same, a reception apparatus for 
offering the storage service, and a method and a computer 
• program for the same, all of which improve performance of 
particular reproduction processes in the storage service. 

10 The reception apparatus (hereafter called "reception 

apparatus A") for providing a storage service according 
to the invention is made up of: a reception unit for 
receiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetermined unit of 

15 scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key- 
corresponding to the predetermined unit of scrambled 
content, and at least one piece of storage information in 
which a list including all descrambling keys to be used 

20 for descrambling the scrambled content is embedded; a 
storage unit for storing the received scrambled content 
and the storage information; a list extraction unit for 
extracting the list from the stored storage information; 
a descramble processing unit for (a) extracting the 

25 predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the predetermined unit of scrambled 

4 



content from the extracted list, and (c) de scrambling the 
extracted predetermined unit of scrambled content using 
the extracted descrambling key; and a reproduction unit 
for reproducing the predetermined unit of descrambled 
5 content in the descrambled order. 

With this construction, the storage information in 
which the list of the descrambling keys is embedded and 
. the scrambled content can be received and stored. As a 
result, when reproducing the stored scrambled content, a 
h 10 descrambling key required for descrambling scrambled 

s 

ry content in the predetermined unit can be extracted from 

p the list, 

m 

V: Therefore, the extraction of the descramblxng key can 

* be executed in a short time and at low load, which improves 

j*f 15 the performance of particular reproduction processes, such 

I? sis 

W as fast forward speed, to a sufficient level. 

O 

N- In the above reception apparatus, the reception unit 

receives one piece of storage information in which the list 
is embedded, the storage unit stores the received scrambled 
20 content and the one piece of storage information, and the 
list extraction unit extracts the list from the stored one 
piece of storage information. 

With this construction, the reception apparatus can 
receive and store a piece of storage information in which 
25 the list of descrambling keys is embedded and extract the 
list from the stored one piece of storage information. 

In the above reception apparatus, the reception unit 
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receives a plurality of pieces of storage information in 
each piece of which a divided portion of the list is 
embedded, the storage unit stores the received scrambled 
content and the plurality of pieces of storage information, 
5 and the list extraction unit extracts the list from the 
stored plurality of pieces of storage information. 

With this construction, the reception apparatus can 
■ receive and store the plurality of pieces of storage ECM, 
in each piece of which a divided portion of the list of 

8 IS 

hsss 

Q 10 descrambling keys is embedded, and extract the list from 
F|| the stored plurality of pieces of storage information, 

fl In the above reception apparatus, the reception unit 

y : sequentially receives a transport stream (TS) packet 

j\ including the predetermined unit of scrambled content, the 

jj 15 storage unit sequentially stores the received TS packet, 
g wherein the descramble processing unit includes: a 

scrambled content extraction unit for extracting the 
predetermined unit of scrambled content from one of the 
TS packets stored in the storage unit, and counting the 
20 ordinal position of the TS packet from the leading TS 
packet; a descrambling key extraction unit for extracting 
a descrambling key from the list, based on the counted 
ordinal position; and a descrambling unit for descrambling 
the extracted predetermined unit of scrambled content 
25 using the extracted descrambling key. 

With this construction, the reception apparatus 
counts the number of TS packets from the leading TS packet, 
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and can easily extract a descrambling key from the list, 
based on the counted number of TS packets. 

In the above reception apparatus A, the reception 
unit receives at least one storage Entitlement Control 
5 Message (ECM) as the at least one piece of storage 

information, the list being embedded in a portion to be 
encoded in the main body of the ECM, the storage unit stores 
• the received storage ECMs, and the list extraction unit 
interprets the stored storage ECMs to extract the list 
g 10 (hereafter called "reception apparatus B") . 

3 S 
K RW 

fll With this construction, the reception apparatus can 

W 

P receive and store the storage ECM, where the list is 

\& embedded in a portion to be encoded in a main body of the 

« 

|,4 ECM, and interpret the stored storage ECM to extract the 

ffj 

y : 15 list. Therefore, the invention can be realized according 
It to the current standard. 

^ In the above reception apparatus B, the reception 

unit receives the storage ECMs including identifying 
information for distinguishing the storage ECMs from 
20 another type of ECM. 

With this construction, the storage ECMs can be 
easily distinguished from another type of ECM, because the 
storage ECMs include identifying information. 

In the above reception apparatus B, the reception 
25 unit receives the storage ECMs at a time. 

With this construction, the storage ECMs can be 
transmitted at a time. As a result, a load necessary to 
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control the transmission timing by the broadcast apparatus 
can be reduced. 

In the above reception apparatus A, the reception 
unit sequentially receives a TS packet including (a) the 
predetermined unit of scrambled content and (b) packet 
specifying information for specifying an unscrambled TS 
packet, and the storage unit sequentially stores the 
received TS packet, wherein the descramble processing unit 
includes: a scrambled content extraction unit for 
extracting the predetermined unit of scrambled content and 
the packet specifying information from one of the TS 
packets stored in the storage unit; a descrambling key 
extraction unit for extracting a descrambling key from the 
list, based on the extracted packet specifying 
information; and a descrambling unit for descrambling the 
extracted predetermined unit of scrambled content using 
the extracted descrambling key. 

With this construction, the descrambling key can be 
easily extracted from the list, based on the packet 
specifying information. 

In the above reception apparatus, the packet 
specifying information is one of Continuity Counter (CC) , 
the number of TS packets, a cumulative amount of data, a 
relative reproduction time, and a scrambling key 
identifier, the scrambled content extraction unit extracts, 
as the packet specifying information, one of the 
Continuity Counter (CC) , the number of TS packets, the 
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cumulative amount of data, the relative reproduction time, 
and the scrambling key identifier, and the descrambling 
key extraction unit performs a predetermined operation to 
the extracted information as the packet identifying 
5 information to generate a descrambling key identifier, and 
extracts a descrambling key from the list based on the 
descrambling key identifier. 

With this construction, the descrambling key 
identifier is generated by performing the predetermined 
10 operation to one of the CC, the number of TS packets, the 
cumulative amount of data, the relative reproduction time, 
and the scrambling key identifier. As compared with the 

s y 

!•* case where the value of one of the above-stated information 

M- is set at the value of the descrambling key identifier, 

S?s si 

IV 

H 15 the value of the descrambling key identifier becomes 

W 

p difficult to be analyzed by malicious users, which improves 



ri 

lis™ 



the security. In addition, the above-stated information 
used in the current standard also can be used, and other 
information which would lead to increase in the amount of 

20 transmitted data does not need to be attached to extract 
the descrambling key. 

In the above reception apparatus A, the reception 
unit sequentially receives a TS packet including (a) the 
predetermined unit of scrambled content and (b) 

25 unscrambled I picture information, wherein the I picture 
information indicates whether the TS packet corresponding 
to the information consists of a portion of an I picture/an 
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I picture or not, and the storage unit sequentially stores 
the received TS packet, wherein the descramble processing 
unit includes: a scrambled content extraction unit for, 
when performing particular reproduction processes, 
5 extracting the predetermined unit of scrambled content and 
I picture information from one of the TS packets stored 
in the storage unit; an I picture judgement unit for judging 
• whether the extracted predetermined unit of scrambled 
content consists of a portion of an I picture/an I picture 
10 or not, based on the extracted I picture information; a 



descrambling key extraction unit for extracting a 

W 

S descrambling key from the list, only when the extracted 

ru 

H predetermined unit of scrambled content consists of a 

U portion of an I picture/an I picture; and a descrambling 

fU 

y. 15 unit for descrambling the extracted predetermined unit of 

id 

r4 scrambled content using the extracted descrambling key. 



With this construction, the reception apparatus can 
reproduce I pictures only. As a result, particular 
reproduction processes such as fast forward reproduction 

20 can be easily conducted. 

The above reception apparatus A further managing 
contract information and consisting of a security module 
whose portion does not effectively function if a contract 
has not been made, and other modules, the reception 

25 apparatus is further made up of : a list holding unit for 
holding the list extracted by the list extraction unit, 
wherein the list extraction unit and the list holding unit 
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are provided within the security module. 

With this construction, the list can be stored within 
the security module, which prevents the list from being 
analyzed by malicious users, and therefore improves the 
security. 

Another reception apparatus (hereafter called 
"reception apparatus C") for providing a storage service 
according to the invention is made up of : a reception unit 
for receiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetermined unit of 
scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key 
corresponding to the predetermined unit of scrambled 
content, and a descrambling key is attached to each 
predetermined unit of scrambled content; a storage unit 
for storing the received scrambled content; a list 
generation unit for, when/after storing the received 
scrambled content by the storage unit, generating a list 
including all descrambling keys to be used for descrambling 
the scrambled content, based on the descrambling key 
attached to each predetermined unit of scrambled content; 
a descramble processing unit for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) 
descrambling the extracted predetermined unit of scrambled 
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content using the extracted descrambling key; and a 
reproduction unit for reproducing the predetermined unit 
of descrambled content in the descrambled order. 

With this construction, the reception apparatus can 
5 receive and store the scrambled content, while generating 
and holding the list of the descrambling keys . As a result, 
when reproducing the stored scrambled content, a 
- descrambling key required for descrambling the 
predetermined unit of scrambled content can be extracted 
10 from the list. 

Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 

If: as fast forward speed, to a sufficient level. 

TO 

15 In the above reception apparatus C, the reception 

W 

13 unit sequentially receives a TS packet including (a) the 

predetermined unit of scrambled content, and (b) auxiliary 
information including a descrambling key and information 
for associating the descrambling key with scrambled 

20 content, the storage unit sequentially stores the received 
TS packet, and the list generation unit generates the list, 
based on the auxiliary information. 

With this construction, the list can be easily 
generated based on the auxiliary information. 

25 In the above reception apparatus, the TS packet 

includes an ECM, the auxiliary information being embedded 
in a portion to be encoded in a main body of the ECM, and 
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the list generation unit extracts the auxiliary 
information embedded in the ECM, and generates the list 
based on the auxiliary information. 

With this construction, the reception apparatus can 
receive and store the ECM, where the auxiliary information 
is embedded in the portion to be encoded in the main body 
of the ECM, and can interpret the stored ECM to generate 
the list. As a result, the present invention can be 
realized according to the current standard. 

A broadcast apparatus (hereafter called "broadcast 
apparatus A") for providing a storage service according 
to the invention is made up of: an acquisition unit for 
acquiring content to be scrambled and a plurality of 
descrambling keys; a scramble processing unit for 
scrambling a predetermined unit of content out of the 
acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
different for each predetermined unit or each set of a 
plurality of predetermined units; an attaching unit for 
attaching auxiliary information to the predetermined unit 
of scrambled content, the auxiliary information consisting 
of (a) information for identifying the scrambled content 
and (b) a descrambling key corresponding to the content, 
and used for having the reception apparatus generate a list 
of the descrambling keys; and a broadcast unit for 
broadcasting the scrambled content to which the auxiliary 
information is added. 

13 



With this construction, the auxiliary information 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scrambled 
content. As a result, the reception apparatus can easily 
generate the list of the descrambling keys. 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

In the above broadcast apparatus A, the attaching 
unit embeds the auxiliary information in a portion to be 
encoded in a main body of an ECM and attaches the ECM to 
the predetermined unit of scrambled content. 

With this construction, the broadcast apparatus can 
attach the ECM to the scrambled content, where the 
auxiliary information is embedded in the portion to be 
encoded in the main body of the ECM. As a result, the 
present invention can be realized according to the current 
standard. 

Another broadcast apparatus (hereafter called 
"broadcast apparatus B") for providing a storage service, 
according to the invention, is made up of: an acquisition 
unit for acquiring content to be scrambled and a plurality 
of descrambling keys; a list generation unit for generating 
a list of the descrambling keys; an embedding unit for 
embedding the list in at least one piece of predetermined 
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information to generate at least one piece of storage 
information; a scramble processing unit for scrambling a 
predetermined unit of content out of the acquired content 
so that the predetermined unit of scrambled content is 
descrambled using a descrambling key different for each 
predetermined unit or each set of a plurality of 
predetermined units; and a broadcast unit for broadcasting 
the generated storage information and the scrambled 
content . 

With this construction, the broadcast apparatus can 
broadcast the storage information in which the list of the 
descrambling keys is embedded, together with the scrambled 
content . 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

In the above broadcast apparatus B, the embedding 
unit embeds the list in one piece of predetermined 
information to generate one piece of storage information, 
and the broadcasting unit broadcasts the generated one 
piece of information and the scrambled content. 

With this construction, the broadcast apparatus can 
generate and broadcast a piece of storage information in 
which the list of all descrambling keys is embedded. 

In the above broadcast apparatus B, the embedding 
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unit embeds a divided portion of the list in each of a 
plurality of pieces of predetermined information to 
generate a plurality of pieces of storage information, and 
the broadcasting unit broadcasts the generated 
5 plurality of pieces of storage information and the 
scrambled content . 

With this construction, the broadcast apparatus can 
• generate and broadcast a plurality of pieces of storage 
information in each piece of which a divided portion of 
pf 10 the list of descrambling keys is embedded. 

fw In the above broadcast apparatus B, the embedding 

W 

D unit embeds the list in a portion to be encoded in a main 

fy 

\* body of at least one ECM to generate at least one piece 

M of storage information. 

fy 

|1. 15 With this construction, the broadcast apparatus can 



W 
Q 



attach the ECM to the scrambled content, where the list 
is embedded in the portion to be encoded in the main body 
of the ECM. As a result, the present invention can be 
realized according to the current standard. 

20 In the above broadcast apparatus B, the broadcast 

unit broadcasts one set of the storage information while 
all the scrambled content corresponding to the storage 
information are broadcast once. 

This construction can save the amount of data 

25 transmitted. 

A program used for a reception apparatus for 
providing a storage service according to the invention has 
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the reception apparatus conduct the following steps of: 
a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 
predetermined unit of scrambled content, which is a portion 
5 of the scrambled content, is descrambled using a 

descrambling key corresponding to the predetermined unit 
of scrambled content, and at least one piece of storage 
• information in which a list including all descrambling keys 
to be used for descrambling the scrambled content is 
10 embedded; a storage step for storing the received scrambled 
content and the storage information; a list extraction step 
for extracting the list from the stored storage 



f : ii 

il 

M ! information; a descramble processing step for (a) 

M extracting the predetermined unit of scrambled content 

f£ II 

15 from the stored scrambled content, (b) extracting a 

W 

q descrambling key corresponding to the predetermined unit 

u 

of scrambled content from the extracted list, and (c) 
descrambling the extracted predetermined unit of scrambled 
content using the extracted descrambling key; and a 

20 reproduction step for reproducing the predetermined unit 
of descrambled content in the descrambled order. 

With this construction, the storage information in 
which the list of the descrambling keys is embedded and 
the scrambled content can be received and stored. As a 

25 result, when reproducing the stored scrambled content, a 
descrambling key required for descrambling scrambled 
content in the predetermined unit can be extracted from 
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the list. 

Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 
as fast forward speed, to a sufficient level. 

Another program according to the invention has a 
reception apparatus for providing a storage service 
conduct the following steps of: a reception step for 
receiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetermined unit of 
scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key 
corresponding to the predetermined unit of scrambled 
content, and a descrambling key is attached to each 
predetermined unit of scrambled content; a storage step 
for storing the received scrambled content; a list 
generation step for, when/after storing the received 
scrambled content in the storage step, generating a list 
including all descrambling keys to be used for descrambling 
the scrambled content, based on the descrambling key 
attached to each predetermined unit of scrambled content; 
a descramble processing step for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) 
descrambling the extracted predetermined unit of scrambled 
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content using the extracted descrambling key; and a 
reproduction step for reproducing the predetermined unit 
of descrambled content in the descrambled order. 

With this construction, the reception apparatus can 
receive and store the scrambled content, while generating 
and holding the list of the descrambling keys . As a result, 
when reproducing the stored scrambled content, a 
- descrambling key required for descrambling the 
predetermined unit of scrambled content can be extracted 
from the list. 

Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 
as fast forward speed, to a sufficient level. 

A program used for a broadcast apparatus for 
providing a storage service according to the invention has 
the broadcast apparatus conduct the following steps of: 
an acquisition step for acquiring content to be scrambled 
and a plurality of descrambling keys; a scramble processing 
step for scrambling a predetermined unit of content out 
of the acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
different for each predetermined unit or each set of a 
plurality of predetermined units; an attaching step for 
attaching auxiliary information to the predetermined unit 
of scrambled content, the auxiliary information consisting 
of (a) information for identifying the scrambled content 
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and (b) a descrambling key corresponding to the content, 
and used for having the reception apparatus generate a list 
of the descrambling keys; and a broadcast step for 
broadcasting the scrambled content to which the auxiliary 
5 information is added. 

With this construction, the auxiliary information 
used for having the reception apparatus generate the list 
• of the descrambling keys can be attached to the scrambled 
content. As a result, the reception apparatus can easily 
Q 10 generate the list of the descrambling keys, 
fy Therefore, the extraction of the descrambling key by 

3 the reception apparatus can be executed in a short time 

fj! 

j,I and at low load, which improves the performance of 

j\ particular reproduction processes, such as fast forward 

!j 15 speed, to a sufficient level. 

W Another program according to the invention has a 

^* broadcast apparatus for providing a storage service 

conduct the following steps of: an acquisition step for 
acquiring content to be scrambled and a plurality of 
20 descrambling keys; a list generation step for generating 
a list of the descrambling keys; an embedding step for 
embedding the list in at least one piece of predetermined 
information to generate at least one piece of storage 
information; a scramble processing step for scrambling a 
25 predetermined unit of content out of the acquired content 
so that the predetermined unit of scrambled content is 
descrambled using a descrambling key different for each 
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predetermined unit or each set of a plurality of 
predetermined units; and a broadcast step for broadcasting 
the generated storage information and the scrambled 
content . 

With this construction, the broadcast apparatus can 
broadcast the storage information in which the list of the 
descrambling keys is embedded, together with the scrambled 
content . 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

A recording medium, according to the invention, on 
which a program used for a reception apparatus for 
providing a storage service is recorded, the program has 
the reception apparatus conduct the following steps of: 
a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 
predetermined unit of scrambled content, which is a portion 
of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined unit 
of scrambled content, and at least one piece of storage 
information in which a list including all descrambling keys 
to be used for descrambling the scrambled content is 
embedded; a storage step for storing the received scrambled 
content and the storage information; a list extraction step 
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for extracting the list from the stored storage 
information; a descramble processing step for (a) 
extracting the predetermined unit of scrambled content 
from the stored scrambled content, (b) extracting a 
descrambling key corresponding to the predetermined unit 
of scrambled content from the extracted list, and (c) 
descrambling the extracted predetermined unit of scrambled 
content using the extracted descrambling key; and a 
reproduction step for reproducing the predetermined unit 
of descrambled content in the descrambled order. 

With this construction, the storage information in 
which the list of the descrambling keys is embedded and 
the scrambled content can be received and stored. As a 
result, when reproducing the stored scrambled content, a 
descrambling key required for descrambling scrambled 
content in the predetermined unit can be extracted from 
the list. 

Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 
as fast forward speed, to a sufficient level. 

Another recording medium, according to the invention, 
on which a program used for a reception apparatus for 
providing a storage service is recorded, the program has 
the reception apparatus conduct the following steps of: 
a reception step for receiving the scrambled content, 
wherein the scrambled content is scrambled so that a 
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predetermined unit of scrambled content, which is a portion 
of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined unit 
of scrambled content, and a descrambling key is attached 
to each predetermined unit of scrambled content; a storage 
step for storing the received scrambled content; a list 
generation step for, when/after storing the received 
scrambled content in the storage step, generating a list 
including all descrambling keys to be used for descrambling 
the scrambled content, based on the descrambling key 
attached to each predetermined unit of scrambled content; 
a descramble processing step for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) 
descrambling the extracted predetermined unit of scrambled 
content using the extracted descrambling key; and a 
reproduction step for reproducing the predetermined unit 
of descrambled content in the descrambled order. 

With this construction, the reception apparatus can 
receive and store the scrambled content, while generating 
and holding the list of the descrambling keys . As a result, 
when reproducing the stored scrambled content, a 
descrambling key required for descrambling the 
predetermined unit of scrambled content can be extracted 
from the list. 



23 



Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 
as fast forward speed, to a sufficient level. 

A recording medium, according to the invention, on 
which a program used for a broadcast apparatus for 
providing a storage service is recorded, the program has 
the broadcast apparatus conduct the following steps of: 
an acquisition step for acquiring content to be scrambled 
and a plurality of descrambling keys; a scramble processing 
step for scrambling a predetermined unit of content out 
of the acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
different for each predetermined unit or each set of a 
plurality of predetermined units; an attaching step for 
attaching auxiliary information to the predetermined unit 
of scrambled content, the auxiliary information consisting 
of (a) information for identifying the scrambled content 
and (b) a descrambling key corresponding to the content, 
and used for having the reception apparatus generate a list 
of the descrambling keys; and a broadcast step for 
broadcasting the scrambled content to which the auxiliary 
information is added. 

With this construction, the auxiliary information 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scrambled 
content. As a result, the reception apparatus can easily 
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generate the list of the descrambling keys. 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
5 particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

Another recording medium, according to the 
invention, on which a program used for a broadcast 
apparatus for providing a storage service is recorded, the 
10 program has the broadcast apparatus conduct the following 

ftj steps of: an acquisition step for acquiring content to be 

LtJ 

O scrambled and a plurality of descrambling keys; a list 

\% generation step for generating a list of the descrambling 

keys; an embedding step for embedding the list in at least 
one piece of predetermined information to generate at least 
one piece of storage information; a scramble processing 
step for scrambling a predetermined unit of content out 
of the acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
20 different for each predetermined unit or each set of a 
plurality of predetermined units; and a broadcast step for 
broadcasting the generated storage information and the 
scrambled content. 

With this construction, the broadcast apparatus can 
broadcast the storage information in which the list of the 
descrambling keys is embedded, together with the scrambled 
content . 



s 

11 15 

w 

f **S 



25 



25 



Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

A recording medium according to the invention on 
which content to be broadcast to a reception apparatus is 
recorded, the content are made up of: scrambled content 
which is scrambled so that a predetermined unit of 
scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key 
corresponding to the predetermined unit of content, and 
a storage ECM, wherein a list including all descrambling 
keys used for descrambling the scrambled content is 
embedded in a portion to be encoded in a main body of at 
least one ECM. 

With this construction, the broadcast apparatus can 
broadcast the ECM, where the list including all 
descrambling keys is embedded in the portion to be encoded 
in the main body of the ECM. As a result, the extraction 
of the descrambling key by the reception apparatus 
receiving the content can be executed in a short time and 
at low load, which improves the performance of particular 
reproduction processes, such as fast forward speed, to a 
sufficient level. 

A method for receiving a storage service according 
to the invention includes the steps of: a reception step 
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for receiving the scrambled content, wherein the scrambled 
content is scrambled so that a predetermined unit of 
scrambled content, which is a portion of the scrambled 
content, is descrambled using a descrambling key 
corresponding to the predetermined unit of scrambled 
content, and at least one piece of storage information in 
which a list including all descrambling keys to be used 
for descrambling the scrambled content is embedded; a 
storage step for storing the received scrambled content 
and the storage information; a list extraction step for 
extracting the list from the stored storage information; 
a descramble processing step for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the predetermined unit of scrambled 
content from the extracted list, and (c) descrambling the 
extracted predetermined unit of scrambled content using 
the extracted descrambling key; and a reproduction step 
for reproducing the predetermined unit of descrambled 
content in the descrambled order. 

With this construction, the storage information in 
which the list of the descrambling keys is embedded and 
the scrambled content can be received and stored. As a 
result, when reproducing the stored scrambled content, a 
descrambling key required for descrambling scrambled 
content in the predetermined unit can be extracted from 
the list. 
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Therefore, the extraction of the descrambling key can 
be executed in a short time and at low load, which improves 
the performance of particular reproduction processes, such 
as fast forward speed, to a sufficient level. 

Another method for receiving a storage service 
according to the invention includes the steps of: a 
reception step for receiving the scrambled content, 
' wherein the scrambled content is scrambled so that a 
predetermined unit of scrambled content, which is a portion 
of the scrambled content, is descrambled using a 
descrambling key corresponding to the predetermined unit 
of scrambled content, and a descrambling key is attached 
to each predetermined unit of scrambled content; a 
storage step for storing the received scrambled content; 
a list generation step for, when/after storing the received 
scrambled content in the storage step, generating a list 
including all descrambling keys to be used for descrambling 
the scrambled content, based on the descrambling key 
attached to each predetermined unit of scrambled content; 
a descramble processing step for (a) extracting the 
predetermined unit of scrambled content from the stored 
scrambled content, (b) extracting a descrambling key 
corresponding to the extracted predetermined unit of 
scrambled content from the generated list, and (c) 
descrambling the extracted predetermined unit of scrambled 
content using the extracted descrambling key; and a 
reproduction step for reproducing the predetermined unit 
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of descrambled content in the descrambled order. 

With this construction, the reception apparatus can 
receive and store the scrambled content, while generating 
and holding the list of the descrambling keys . As a result, 
5 when reproducing the stored scrambled content, a 
descrambling key required for descrambling the 
predetermined unit of scrambled content can be extracted 
from the list. 

Therefore, the extraction of the descrambling key can 

0 10 be executed in a short time and at low load, which improves 

p 

flj the performance of particular reproduction processes, such 

O as fast forward speed, to a sufficient level. 

fij 

}* A method for broadcasting a storage service according 

U to the invention includes the steps of: an acquisition step 

U 15 for acquiring content to be scrambled and a plurality of 
H descrambling keys; a scramble processing step for 

H ' scrambling a predetermined unit of content out of the 

acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
20 different for each predetermined unit or each set of a 
plurality of predetermined units ; an attaching step for 
attaching auxiliary information to the predetermined unit 
of scrambled content, the auxiliary information consisting 
of (a) information for identifying the scrambled content 
25 and (b) a descrambling key corresponding to the content, 
and used for having the reception apparatus generate a list 
of the descrambling keys; and a broadcast step for 
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broadcasting the scrambled content to which the auxiliary 
information is added. 

With this construction, the auxiliary information 
used for having the reception apparatus generate the list 
of the descrambling keys can be attached to the scrambled 
content. As a result, the reception apparatus can easily 
generate the list of the descrambling keys. 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

Another method for broadcasting a storage service 
according to the invention includes the steps of: an 
acquisition step for acquiring content to be scrambled and 
a plurality of descrambling keys; a list generation step 
for generating a list of the descrambling keys; an 
embedding step for embedding the list in at least one piece 
of predetermined information to generate at least one piece 
of storage information; a scramble processing step for 
scrambling a predetermined unit of content out of the 
acquired content so that the predetermined unit of 
scrambled content is descrambled using a descrambling key 
different for each predetermined unit or each set of a 
plurality of predetermined units; and a broadcast step for 
broadcasting the generated storage information and the 
scrambled content. 
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With this construction, the broadcast apparatus can 
broadcast the storage information in which the list of the 
descrambling keys is embedded, together with the scrambled 
content • 

Therefore, the extraction of the descrambling key by 
the reception apparatus can be executed in a short time 
and at low load, which improves the performance of 
particular reproduction processes, such as fast forward 
speed, to a sufficient level. 

BRIEF DESCRIPTION OF THE DRAWINGS 

These and the other objects, advantages and features 
of the invention will become apparent from the following 
description thereof taken in conjunction with the 
accompanying drawings which illustrate a specific 
embodiment of the invention. 

In the drawings : 

FIG. 1 is the construction of a system for providing 
a storage service according to the first embodiment of the 
invention; 

FIG. 2 shows one example of the data structure of a 
scrambling key list descriptor; 

FIG. 3 shows one example of the data structure of an 
ECM for storage; 

FIG. 4 shows timing for transmitting the scrambling 

key list; 

FIG. 5 shows the detailed construction of the 
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scrambling process unit 103; 

FIG. 6 shows a relation between content and 
scrambling keys in a transport stream (TS) ; 

FIG. 7 shows the scrambling key list associated with 
the TS shown in FIG. 6; 

FIG. 8 shows the detailed construction of the 
descrambling process unit 204; 

FIG. 9 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 100 according to the 
first embodiment of the invention; 

FIG. 10 shows a procedure in the scrambling process 
by means of the scrambling process unit 103 in detail. 

FIG. 11 shows a procedure in the reception and storage 
processes by means of the reception apparatus 200 and the 
security module 300 according to the first embodiment of 
the invention; 

FIG. 12 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 200 and the security module 300 
according to the first embodiment of the invention; 

FIG. 13 shows a procedure in the descrambling process 
by means of the descrambling process unit 204 in detail; 

FIG. 14 is a schematic view showing an image stream 
in the MPEG-2 coding system; 

FIG. 15 shows a TS obtained by converting the image 
stream shown in FIG. 14; 

FIG. 16 shows a procedure in the descrambling process 
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in the fast-forward reproduction mode in detail; 

FIG. 17 shows a portion of the construction of a 
system for providing a storage service according to the 
second embodiment of the invention; 

FIG. 18 shows the detailed construction of the 
descrambling process unit 401; 

FIG. 19 shows a portion of the construction of a 
system for providing a storage service according to the 
third embodiment of the invention; 

FIG. 20 shows the detailed construction of the 
scrambling process unit 601; 

FIG. 21 shows the scrambling key list in the case the 
value of "CC mod 16" is set at the scrambling key 
identifier; 

FIG. 22 shows the detailed construction of the 
descrambling process unit 701; 

FIG. 23 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 600 according to the 
third embodiment of the invention; 

FIG. 24 shows a procedure in the scrambling process 
by means of the scrambling process unit 601 in detail; 

FIG. 25 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 700 and the security module 300 
according to the third embodiment of the invention; 

FIG. 26 shows a procedure in the descrambling process 
by means of the descrambling process unit 701 in detail; 
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FIG. 27 shows the construction of a system for 
providing a storage service according to the fourth 
embodiment of the invention; 

FIG. 28 shows one example of the data structure of 
the scrambling key list generation descriptor; 

FIG. 2 9 shows one example of the data structure of 
an ECM for normal reproduction, to which the scrambling 
key list generation descriptor is added; 

FIG. 30 shows the detailed construction of the 
scrambling process unit 802; 

FIG. 31 shows the detailed construction of the 
descrambling process unit 905; 

FIG. 32 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 8 00 according to the 
fourth embodiment of the invention; 

FIG. 33 shows a procedure in the scrambling process 
by means of the scrambling process unit 802 in detail; 

FIG. 34 shows a procedure in the reception and storage 
processes by means of the reception apparatus 900 and the 
security module 1000 according to the fourth embodiment 
of the invention; 

FIG. 35 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 900 and the security module 1000 
according to the fourth embodiment of the invention; 

FIG. 36 shows a procedure in the descrambling process 
by means of the descrambling process unit 905 in detail; 
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FIG. 37 shows the construction of a system for 
providing a storage service according to the fifth 
embodiment of the invention; 

FIG. 38 is a schematic diagram showing changes in the 
5 scrambling keys and timing for updating ECMs for normal 
reproduction; 

FIG. 39 is a schematic diagram showing changes 
' between an even number key and an odd number key, and timing 
for updating ECMs for normal reproduction; 

0 10 FIG . 40 shows a transition of the scrambling key list 

Q 

FU generated; 

1 s ii 

p FIG. 41 shows the detailed construction of the 

j4 descrambling process unit 1207; 

FIG. 42 shows a procedure in the broadcasting process 

hi 

15 by means of the broadcast apparatus 1100 according to the 

j s ;•: 

j:Zf fifth embodiment of the invention; 

FIG. 43 shows a procedure in the reception and storage 
processes by means of the reception apparatus 1200 and the 
security module 1300 according to the fourth embodiment 
20 of the invention; 

FIG. 44 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 1200 and the security module 1300 
according to the fifth embodiment of the invention; 
25 FIG. 45 shows a procedure in the descrambling process 

by means of the descrambling process unit 1207 in detail; 
and 
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FIG. 46 shows one example of the data structure of 
an I picture list descriptor. 

DESCRIPTION OF THE PREFERRED EMBODIMENT 

First Embodiment 

<Summary> 

A system for providing a storage service according 
to the first embodiment of the invention consists of a 
broadcast apparatus , a reception apparatus , and a security 
module . 

The broadcast apparatus generates a scrambling key 
list including all of the scrambling keys necessary for 
descrambling scrambled content, includes the list in an 
ECM for storage (hereafter called "storage ECM" ) , and 
broadcasts the scrambled content accompanied with the ECM. 

The security module, which is integrated with the 
reception apparatus in a predetermined position, receives 
and stores the storage ECM and the scrambled content, 
decodes the ECM for storage in return for the paid charges, 
and sequentially descrambles the received scrambled 
content using the scrambling key list included in the 
storage ECM. 
<Overall Construct ion> 

FIG. 1 shows the construction of the system for 
providing a storage service according to the first 
embodiment of the invention. The system shown in FIG. 1 
consists of a broadcast apparatus 100, a reception 
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apparatus 200, and a security module 300. 

Note that, in FIG. 1, a scrambling key recording unit 
10 which records scrambling keys and a content recording 
unit 11 which records content are shown for explanation. 

The security module 300 is a portable and intelligent 
recording medium such as an IC card. The security module 
300 is set in a predetermined position of the reception 
apparatus 200 and used together with the reception 
apparatus 200. 

(Construction of Broadcast Apparatus) 

The broadcast apparatus 100 shown in FIG. 1 consists 
of a TS packetizing unit 101, a scrambling key list 
generation unit 102, a scrambling process unit 103, an ECM 
generation unit 104, a multiplexing unit 105, a content 
acquisition unit 106, and a scrambling key acquisition unit 
107. 

The content acquisition unit 106 acquires content 
including visual, audio, and text data recorded in the 
content recording unit 11. 

The TS packetizing unit 101 converts the content 
acquired by the content acquisition unit 106 into transport 
stream (hereafter abbreviated as "TS" ) packets. 

Note that the TS packet has the fixed length of 188 
bytes as prescribed by the MPEG-2 standard. 

The scrambling key acquisition unit 107 acquires 
scrambling keys recorded in the scrambling key recording 
unit 10. 
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The scrambling key list generation unit 102 generates 
a scrambling key list base on the scrambling keys acquired 
by the scrambling key acquisition unit 107. 

Note that the scrambling key list is represented by 
scrambling key list descriptors, for example. 

FIG. 2 shows one example of the data structure of a 
scrambling key list descriptor. 

The scrambling key list descriptor shown in FIG. 2 
includes a scrambling key identifier (Ks_id) for 
identifying a scrambling key, the scrambling key(Ks) , and 
the number of TS packets to be scrambled with the scrambling 
key (TS_packet__number ) . In the list, the scrambling key 
identifiers (Ks_id) , the scrambling keys (Ks), and the 
number of TS packets are described as much as the number 
of scrambling keys. 

The scrambling process unit 103 scrambles the content 
converted into TS packets by the TS packetizing unit 101, 
based on the scrambling key list generated by the 
scrambling key list generation unit 102. The detailed 
description on the scrambling process unit 103 will be 
given later. 

The ECM generation unit 104 generates ECMs for normal 
reproduction (hereafter called "normal reproduction ECM") , 
which are the same as in the conventional system, and also 
generates storage ECMs including the scrambling key list 
generated by the scrambling key list generation unit 102. 

Note that the storage ECM is used for reproducing the 
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stored scrambled content. 

FIG. 3 shows one example of the data structure of a 
storage ECM. 

The storage ECM shown in FIG. 3 is generated by adding 
the scrambling key list descriptor as described above to 
a variable portion (a target to be encoded) in the main 
body of the ECM as prescribed by the ARIB (The Association 
of Radio Industries and Businesses) standard. 

In a storage ECM, information for distinguishing the 
storage ECM from a normal reproduction ECM is also embedded. 
For instance, different values may be set at the table 
identifiers described in the section header for the storage 
ECM and the normal reproduction ECM. Alternatively, 
different values may be set at the extended table 
identifiers for the both ECMs, while the same value being 
set at the table identifiers for them. 

The multiplexing unit 105 attaches/attaches the 
generated normal reproduction ECM with/to the scrambled 
content, multiplexes it with a storage ECM to produce a 
TS, and broadcasts the TS. 

The following describes transmission timing for the 
storage ECM. 

Since one scrambling key list has only to be 
transmitted for each piece of scrambled content, the 
storage ECM may be transmitted in a time period longer than 
the transmission period for the conventional ECM. 

FIG. 4 shows transmission timing for the scrambling 
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key list. 

As shown in FIG. 4, in the BS digital broadcasting 
system, the storage ECM may be transmitted in the time 
period approximately ten times as long as for the 
conventional ECM . In the environment where ECMs can be 
securely stored without any reception errors and storage 
errors, one storage ECM has only to be transmitted while 
all of the scrambled content associated with the storage 
ECM have been transmitted once. 

FIG. 5 shows the detailed construction of the 
scrambling process unit 103. 

The scrambling process unit 103 shown in FIG. 5 
consists of a TS packet counting unit 110, a scrambling 
key list holding unit 111, a scrambling unit 112, and a 
scrambling key list interpretation unit 113. 

The TS packet counting unit 110 acquires the content 
converted into TS packets by the TS packetizing unit 101 
one TS packet at a time and passes it to the scrambling 
unit 112. The TS packet counting unit 110 also counts the 
TS packet cumulative number indicating the ordinal 
position of the acquired TS packet counted from the 
beginning of the content, and passes the number to the 
scrambling key list interpretation unit 113. The TS 
packet counting unit 110 resets the TS packet cumulative 
number into zero when other content starts to be processed. 

The scrambling key list holding unit 111 acquires the 
scrambling key list generated by the scrambling key list 
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generation unit 102 and holds it therein. 

The scrambling key list interpretation unit 113 
extracts the scrambling key corresponding to the TS packet 
to be scrambled from the scrambling key list stored in the 
scrambling key list holding unit 111, based on the TS packet 
cumulative number passed from the TS packet counting unit 
110, and passes the extracted key to the scrambling unit 
112. 

FIG. 6 shows a relation between content and 
scrambling keys in a TS. 

As shown in FIG. 6, this TS consists of four hundreds 
of TS packets obtained by converting content to be 
scrambled. Scrambling keys are changed, every one hundred 
of TS packets. 

FIG. 7 shows the scrambling key list associated with 
the TS shown in FIG. 6. 

As shown in FIG. 7, in this scrambling key list, the 
scrambling key associated with the leading one hundreds 
of TS packets is Ksl, the scrambling key associated with 
the TS packets from the 101 st to 200 th is Ks2, the scrambling 
key associated with the TS packets from the 201 st to 300 th 
is Ks3, and the scrambling key associated with the TS 
packets from the 301 st to the 400 th is Ks 4 . 

The scrambling unit 112 scrambles one TS packet 
passed from the TS packet counting unit 110 using the 
scrambling key passed from the scrambling key list 
interpretation unit 113 and passes it to the multiplexing 
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unit 105. The scrambling unit 112 repeats this process 
until all TS packets have been processed. 
(Construction of Reception Apparatus and Security Module) 

The reception apparatus 200 shown in FIG. 1 consists 
of a TS separation unit 201, an HDD 202, a scrambling key 
list holding unit 203, a descrambling process unit 204, 
and a reproduction unit 205. 

The security module 300 shown in FIG. 1 is made up 
of an ECM interpretation unit 301. 

The TS separation unit 201 receives a TS broadcast 
from the multiplexing unit 105, distinguishes between a 
normal reproduction ECM and a storage ECM based on the value 
of the table identifier or the extended table identifier, 
and separates the storage ECM and scrambled content. 

The HDD 202 is a recording medium such as a hard disk 
drive . The HDD 202 stores the storage ECM and the scrambled 
content separated by the TS separation unit 201. 

The ECM interpretation unit 301 extracts a scrambling 
key list from the storage ECM stored in the HDD 202. 

The scrambling key list holding unit 203 holds the 
scrambling key list extracted by the ECM interpretation 
unit 301. 

The descrambling process unit 204 descrambles the 
scrambled content stored in the HDD 202 based on the 
scrambling key list held by the scrambling key list holding 
unit 203 and passes it to the reproduction unit 205. 
Detailed description on the descrambling process unit 204 
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will be given later. 

The reproduction unit 205 reproduces the descrambled 
content. 

FIG. 8 shows the detailed construction of the 
descrambling process unit 204. 

The descrambling process unit 204 shown in FIG. 8 is 
made up of a TS packet extraction unit 210, a descrambling 
unit 211, and a scrambling key list interpretation unit 
212. 

The TS packet extraction unit 210 extracts the 
scrambled content stored in the HDD 202 one TS packet at 
a time to pass it to the descrambling unit 211. Also, the 
TS packet extraction unit 210 counts the TS packet index 
indicating shows the ordinal position of the extracted TS 
packet counted from the beginning of the content and passes 
the index to the scrambling key list interpretation unit 
212. Here, the TS packet extraction unit 210 resets the 
TS packet index into zero when other content start to be 
processed. 

The scrambling key list interpretation unit 212 
extracts the scrambling key corresponding to the TS packet 
index passed from the TS packet extraction unit 210 from 
the scrambling key list held by the scrambling key list 
holding unit 203 and passes it to the descrambling unit 
211. 

The descrambling unit 211 descrambles one TS packet 
passed from the TS packet extraction unit 210 using the 
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scrambling key extracted by the scrambling key list 
interpretation unit 212 and passes it to the reproduction 
unit 205. The descrambling unit 211 repeats this process 
until all TS packets have been processed. 
<Operations> 

(Operations of Broadcast Apparatus) 

FIG. 9 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 100 according to the 
first embodiment of the invention. 

Following describes the outline of the procedure with 
reference to FIG. 9. 

(1) The content acquisition unit 106 acquires content 
such as image , sounds, and text data recorded in the content 
recording unit 11 (Step SI) . 

(2) The TS packetizing unit 101 converts the content 
acquired by the content acquisition unit 106 into TS 
packets (Step S2) . 

(3) The scrambling key acquisition unit 107 acquires 
the scrambling key recorded in the scrambling key recording 
unit 10 (Step S3) . 

(4) The scrambling key list generation unit 102 
generates a scrambling key list based on the scrambling 
key acquired by the scrambling key acquisition unit 107 
(Step S4) . 

(5) The scrambling process unit 103 scrambles the 
content converted into TS packets by the TS packetizing 
unit 101, based on the scrambling key list generated by 
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the scrambling key list generation unit 102 (Step S5) . 

(6) The ECM generation unit 104 generates a normal 
reproduction ECM and generates a storage ECM including the 
scrambling key list generated by the scrambling key list 

5 generation unit 102 (Step S6) . 

(7) The multiplexing unit 105 associates/attaches 
the generated normal reproduction ECM to/with to the 

' scrambled content, multiplexes it with the storage ECM to 
generate TS, and broadcasts the TS (Step S7) . 
O 10 FIG. 10 shows a procedure in the scrambling process 

rU by means of the scrambling process unit 103 in detail. 

C3 Following describes the outline of the detailed 

ru 

u procedure in the scrambling process, with reference to FIG. 

U 10 • 

pf 15 (1) The TS packet counting unit 110 resets the TS 

p. packet cumulative number into zero (Step Sll) . 

(2) The TS packet counting unit 110 judges whether 
there are unprocessed TS packets or not (Step S12) . If 
there are no any unprocessed TS packets, the scrambling 

20 process ends. 

(3) If there are unprocessed TS packets, the TS packet 
counting unit 110 acquires one unprocessed TS packet to 
pass it to the scrambling unit 112, and counts the TS packet 
cumulative number to pass it to the scrambling key list 

25 interpretation unit 113 (Step S13) . 

(4) The scrambling key list interpretation unit 113 
extracts the scrambling key corresponding to the TS packet 
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now being processed from the scrambling key list stored 
in the scrambling key list holding unit 111, based on the 
TS packet cumulative number passed from the TS packet 
counting unit 110 (Step S14). 

(5) The scrambling unit 112 scrambles one TS packet 
passed from the TS packet counting unit 110 using the 
scrambling key passed from the scrambling key list 
interpretation unit 113 and passes it to the multiplexing 
unit 105. Then, the procedure returns upward to process 
the successive TS packet(Step S15). 
(Operations of Reception Apparatus) 

FIG. 11 shows a procedure in the reception and storage 
processes by means of the reception apparatus 200 and the 
security module 300 according to the first embodiment of 
the invention. 

Following describes the outline of the processes with 
reference to FIG. 11. 

( 1 ) The TS separation unit 201 receives a TS broadcast 
from the multiplexing unit 105. Then, the TS separation 
unit 201 distinguishes a normal reproduction ECM and a 
storage ECM based on the value of the table identifier or 
the extended table identifier, and separates the storage 
ECM and scrambled content (Step S21) . 

(2) The HDD 202 stores the storage ECM and the 
scrambled content separated by the TS separation unit 201 
(Step S22) . 

Note that, the storage ECM and the scrambled content 
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may be separated not at this stage but later (e.g., before 
using them) . 

FIG. 12 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
5 reception apparatus 200 and the security module 300 
according to the first embodiment of the invention. 

Following describes the outline of the procedure in 
the reproduction process, with reference to FIG. 12. 

(1) The ECM interpretation unit 301 extracts the 
P 10 scrambling key list from the storage ECM stored in the HDD 
W 202 (Step S31) . 

S3 (2) The scrambling key list holding unit 203 holds 

?! ii 

j>* the scrambling key list extracted by the ECM interpretation 

1+ unit 301 (Step S32) . 

fu 

u 15 (3) The descrambling process unit 204 descrambles the 

hi 

» scrambled content stored in the HDD 202 based on the 

scrambling key list held by the scrambling key list holding 
unit 203 and passes it to the reproduction unit 205 (Step 
S33) . 

20 (4) The reproduction unit 205 reproduces the 

descrambled content (Step S34). 

FIG. 13 shows a procedure in the descrambling process 
by means of the descrambling process unit 204 in detail. 
Following describes the outline of the detailed 
25 procedure in the descrambling process, with reference to 
FIG. 13. 

(1) The TS packet extraction unit 210 resets the TS 
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packet index into zero when other content starts to be 
processed (Step S41) . 

(2) The TS packet extraction unit 210 judges whether 
there are unprocessed TS packets or not (Step S42) . If 
there are not any unprocessed TS packet, the descrambling 
process ends. 

(3) If there are unprocessed TS packets, the TS packet 
extraction unit 210 extracts one unprocessed TS packet to 
pass it to the descrambling unit 211. Also, the TS packet 
extraction unit 210 counts the TS packet index to pass it 
to the scrambling key list interpretation unit 212 (Step 
S43) . 

(4) The scrambling key list interpretation unit 212 
extracts the scrambling key corresponding to the TS packet 
index passed from the TS packet extraction unit 210, from 
the scrambling key list held by the scrambling key list 
holding unit 203, and passes it to the descrambling unit 
211 (Step S44) . 

(5) The descrambling unit 211 descrambles one TS 
packet passed from the TS packet extraction unit 210 using 
the scrambling key extracted by the scrambling key list 
interpretation unit 212 and passes it to the reproduction 
unit 205. Then, the procedure returns upward to process 
the successive TS packet (Step S45) . 

Following describes the procedure of the particular 
reproduction process after the above-described reception 
and storage processes. 
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FIG. 14 is a schematic view showing an image stream 
in the MPEG-2 coding system. 

As shown in FIG. 14, according to the MPEG-2 coding 
system, the image stream consists of three kinds of 
5 pictures: I pictures ( intraf rame-coded picture), B 

pictures (bidirectional frame) , and P pictures (predictive 
picture) . Among these pictures, only I picture can be 
drawn and displayed based solely on the data that it 
contains . 

P 10 Therefore, the fast forward reproduction mode, which 

O 

FU is one of typical particular reproduction processes, can 

y 

O be realized by selecting only I pictures to reproduce 

ru 

U content. 

i 4 FIG. 15 shows a TS obtained by converting the image 

f0 

u 15 stream shown m FIG. 14. 

Si In FIG. 15, the diagonally shaded portions are the 

TS packets obtained by converting the I pictures shown in 
FIG. 14. Pictures II, 12, 13, and 14 are converted into 
TSP1 to TSP4, TSP101 to TSP104, TSP201 to TSP204, andTSP301 
20 to TSP304, respectively. 

The procedure of the fast forward reproduction, which 
is one of typical particular reproduction processes, is 
almost the same as that of the reproduction process shown 
in FIG. 12. However, the detailed procedure in the 
25 descrambling process by means of the descrambling process 
unit 204 is different from that shown in FIG. 12. 

FIG. 16 shows a procedure in the descrambling process 

49 



in the fast-forward reproduction mode in detail. Note 
that the same numerals are assigned to the step in which 
the same processes as in FIG. 13 are conducted, and 
explanation for them has been omitted. 
5 Following describes the outline of the detailed 

procedure in the descrambling process in the fast forward 
reproduction mode, with reference to FIGS. 7 and 13 to 16. 

(1) Same as the step (1) in FIG. 13 (Step S41) 

(2) Same as the step (2) in FIG. 13 (Step S42) 

0 10 (3) Same as the step (3) in FIG. 13 (Step S43) 

p 

FU For instance, when extracting TSP1 shown in FIG. 15, 

C3 the TS packet extraction unit 210 counts the TS packet index 

\ Si? 

H as one, because TSP1 is the first packet. 

(4) The descrambling process unit 204 judges whether 
15 the process is the fast forward reproduction process or 

« not (Step S51) . If the process is not the fast forward 

Iji. 

reproduction process, the procedure goes to the process 
for extracting a scrambling key (to Step S44) . 

(5) If the process is the fast forward reproduction 
20 process, the descrambling process unit 204 judges whether 

the extracted TS packet is the TS packet obtained by 
converting an I picture or not (Step S52) . If the packet 
is not the TS packet obtained by converting an I picture, 
the procedure returns upward to process the successive TS 
25 packet. 

Note that, as one method for judging whether the 
extracted TS packet is the TS packet obtained by converting 
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an I picture or not, the broadcast apparatus may embed the 
information indicative of I picture in the unscrambled 
portion in the TS packet, and the reception apparatus may 
make a judgement based on the information. The Japanese 
5 Laid-Open Patent Application No. 8-340541 discloses such 
a method. 

When extracting the TSPl shown in FIG. 15, the 
descrambling process unit 204 judges the TSPl as the TS 
packet obtained by converting an I picture. 

D 10 (6) Same as the step (4) in FIG. 13 (Step S44) 

O 

m For instance, the scrambling key list interpretation 

Ui 

C3 unit 212 extracts the scrambling key Ksl corresponding to 

VJ 

j* the TS packet index 1 from the scrambling key list shown 

j,4 in FIG. 7. 

P 15 (7) Same as the step (5) in FIG. 13 (Step S45) 

S For instance, the descrambling unit 211 descrambles 

TSP2 shown in FIG. 15 using the scrambling key Ksl. 

Similarly, TSPl to TSP4, TSP101 to TSP104, TSP201 to 
TSP204, and TSP301 to TSP304 are descrambled with the 
20 scrambling keys Ksl, Ks2, Ks3, and Ks 4, respectively. 

Note that, The reverse reproduction process can be 
realized by reversing the extraction order of TS packets 
in the normal reproduction process. 

In addition, the fast reverse reproduction process 
25 can be realized by reversing the extraction order of TS 
packets in the fast forward reproduction process. 

Moreover, the random access reproduction process can 
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be realized by altering the starting position of the TS 
packet to be extracted. 

As stated above, according to the first embodiment, 
various particular reproduction processes can be realized 
by extracting a scrambling key corresponding to any one 
of TS packets from the scrambling key list using the TS 
packet index. 

Embodiment ?. 
<Summary> 

The broadcast apparatus according to the second 
embodiment of the invention has the same construction as 
in the above first embodiment, but the reception apparatus 
and the security module have different constructions. 

The first embodiment is predicted on that information 
does not leak out of the reception apparatus so as to 
provide adequate security of information, and therefore 
the scrambling key list is held in the reception apparatus. 
Whereas, according to the second embodiment, the 
scrambling key list is held in the security module and not 
in the reception apparatus, whereby the security against 
the leakage of the scrambling key list can be improved. 
<Overall Construction> 

FIG. 17 shows a portion of the construction of a 
system for providing a storage service according to the 
second embodiment of the invention. 

The system shown in FIG. 17 is made up of a broadcast 
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apparatus 100, a reception apparatus 400, and a security 
module 500. Note that the broadcast apparatus is not 
illustrated in FIG. 17, because the apparatus is the same 
as in the first embodiment. 

The security module 500 is a portable and intelligent 
recording medium such as an IC card. The security module 
500 is set in a predetermined position of the reception 
apparatus 400 and used together with the reception 
apparatus 4 00. 

Note that construction elements which have the same 
functions as those in the first embodiment have been given 
the same reference numerals and their explanation has been 
omitted. 

(Construction of Broadcast Apparatus) 

The construction of the broadcast apparatus has been 
omitted, because it is the same as in the first embodiment. 
(Constructions of Reception Apparatus and Security Module) 

The reception apparatus shown in FIG. 17 is made up 
of a TS separation unit 201, an HDD 202, a descrambling 
process unit 401, and a reproduction unit 205. 

The security module shown in FIG. 17 is made up of 
an ECM interpretation unit 301, a scrambling key list 
holding unit 501, and a scrambling key list interpretation 
unit 502. 

The scrambling key list holding unit 501 holds the 
scrambling key list extracted by the ECM interpretation 
unit 301. 
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The descrambling process unit 401 extracts the 
scrambled content stored in the HDD 202 one TS packet at 
a time and counts the TS packet index to pass them to the 
scrambling key list interpretation unit 502. Then, on 
receiving the scrambling key corresponding to the TS packet 
index from the scrambling key list interpretation unit 502, 
the descrambling process unit 401 descrambles the TS packet 
using the scrambling key and passes it to the reproduction 
unit 205. Detailed description on the descrambling 
process unit 401 will be given later. 

The scrambling key list interpretation unit 502 
extracts the scrambling key corresponding to the TS packet 
index passed from the descrambling process unit 401, from 
the scrambling key list held by the scrambling key list 
holding unit 501, and passes the extracted key to the 
descrambling process unit 401. 

FIG. 18 shows the detailed construction of the 
descrambling process unit 401. 

The descrambling process unit 401 shown in FIG. 18 
is made up of the TS packet extraction unit 410 and the 
descrambling unit 411. 

The TS packet extraction unit 410 extracts the 
scrambled content stored in the HDD 202 one TS packet at 
a time to pass it to the descrambling unit 411. Also, the 
TS packet extraction unit 410 counts the TS packet index 
indicating the ordinal position of the extracted TS packet 
counted from the beginning of the content and passes it 
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to the scrambling key list interpretation unit 502. Here, 
the TS packet extraction unit 410 resets the TS packet index 
into zero when other content start to be processed. 

The descrambling unit 411 descrambles one TS packet 
passed from the TS packet extraction unit 410 with the 
scrambling key passed from the scrambling key list 
interpretation unit and passes it to the reproduction unit 
205. The descrambling unit 411 repeats this process until 
all TS packets have been processed. 
(Operations) 

Since operations in this embodiment are the same as 
in the first embodiment, their explanation has been 
omitted. 

As described above, according to the second 
embodiment of the invention, various particular 
reproduction processes can be realized, while improving 
the security against the leakage of the scrambling key list 
by extracting a scrambling key corresponding to any one 
of TS packets from the scrambling key list held in the 
security module. 

Embodiment 3 
<Summary> 

According to the third embodiment of the invention, 
correspondences between TS packets and scrambling keys are 
described in the ECM, and the value of Continuity Counter 
(CC) described in the unscrambled portion in the TS packet 
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is utilized, whereby the number of TS packets to be 
scrambled ( TS_packet__n umber ) does not need to be described 
in the scrambling key list descriptor, which leads to 
decrease in the amount of data to be transmitted, 
<Overall Construction> 

FIG. 19 shows a portion of the construction of a system 
for providing a storage service according to the third 
embodiment of the invention. 

The system shown in FIG. 19 is made up of a broadcast 
apparatus 600, a reception apparatus 700, and a security 
module 300. 

Note that construction elements which have the same 
functions as those in the first embodiment have been given 
the same reference numerals and their explanation has been 
omitted. 

(Construction of Broadcast Apparatus) 

The broadcast apparatus shown in FIG. 19 is made up 
of a TS packetizing unit 101, a scrambling key list 
generation unit 102, a scrambling process unit 601, an ECM 
generation unit 104, a multiplexing unit 105, a content 
acquisition unit 106, and a scrambling key list acquisition 
unit 107. 

The scrambling process unit 601 scrambles the content 
converted into TS packets by the TS packetizing unit 101 
based on the scrambling key list generated by the 
scrambling key list generation unit 102. 

FIG. 20 shows the detailed construction of the 
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scrambling process unit 601. 

The scrambling process unit 601 shown in FIG, 20 is 
made up of a scrambling key identifier calculation unit 
610, a TS packet header interpretation unit 611, a 
scrambling key list holding unit 612, a scrambling unit 
613, and a scrambling key list interpretation unit 614. 

The TS packet header interpretation unit 611 acquires 
the content converted into TS packets by the TS packetizing 
unit 101 one TS packet at a time to pass it to the scrambling 
unit 613. Also, the TS packet header interpretation unit 
611 reads the value of Continuity Counter (CC) to pass it 
to the scrambling key identifier calculation unit 610. 

Note that the CC is a cyclic counter using the 
four-bit value of the header in the TS packet as prescribed 
by the MPEG-2 coding system as the international standard. 
The CC increments one by one from zero to fifteen, and then 
returns to zero, which is used to determine if any TS 
packets with the same packet ID are abandoned partway. 

The scrambling key identifier calculation unit 610 
calculates a scrambling key identifier using the value of 
the CC passed from the TS packet header interpretation unit 
611 and passes it to the scrambling key list interpretation 
unit 614. 

One method for calculating a scrambling key 
identifier from the value of the CC is that the value of 
"CC mod n" (where 1 ^n^l6 ) is set at the scrambling key 
identifier. Here, "A mod B" indicates the remainder 
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obtained by dividing A by B. 

For instance, in the case of n=16, there are sixteen 
kinds of scrambling key identifiers (i.e., 0 to 15) . As 
for the TS packet whose value is 2, for example, the 
scrambling key identifier is 2, because the remainder 
obtained by dividing 2 by 16 is 2. 

The scrambling key list holding unit 612 acquires and 
holds the scrambling key list generated by the scrambling 
key list generation unit 102, 

FIG. 21 shows the scrambling key list in the case that 
the value of "CC mod 16" is set at the scrambling key 
identifier. 

The scrambling key list interpretation unit 614 
extracts the scrambling key corresponding to the TS packet 
to be scrambled from the scrambling key list stored in the 
scrambling key list holding unit 612, based on the 
scrambling key identifier passed from the scrambling key 
identifier calculation unit 610 and passes it to the 
scrambling unit 613. 

For instance, in the case that the scrambling key 
identifier is 2, the scrambling key Ks3 is extracted 
according to the scrambling key list shown in FIG. 21. 

The scrambling unit 613 scrambles one TS packet 
passed from the TS packet header interpretation unit 611 
using the scrambling key passed from the scrambling key 
list interpretation unit 614 and passes it to the 
multiplexing unit 105. The scrambling unit 613 repeats 
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this process until all TS packets have been processed. 

For instance, in the case that the scrambling key Ks3 
is extracted, scrambling process is conducted with the 
scrambling key Ks3. 

That is the explanation for the case of n=16. 
Naturally, n is not limited to 16. 

That is, n may be any number between 1 and 15. After 
generating a scrambling key list by changing the value of 
n, the number of used scrambling keys can be easily altered 
without generating the list again. 

For instance, by changing the value of n to 4 without 
changing the scrambling key list shown in FIG. 21, the value 
of identifier can be any number between 0 and 3 . As a result, 
the four types of scrambling keys (Ksl, Ks2, Ks3, and 
Ks4)can be used. Note that the value of n may be stored 
as a calculation method or a fixed value in advance, and 
the method and the value may be described in the variable 
portion in the storage ECM shown in FIG. 3. 

Alternatively, instead of calculating a scrambling 
key identifier from the value of CC, the scrambling key 
identifier may be calculated from the specific bits of the 
Program Clock Reference (PCR) or the Original PCR (OPCR), 
which are also prescribed by the MPEG-2 coding system as 
the international standard. 

For example, using the specific four-bit values in 
the PCR or OPCR, the scrambling key identifier may be 
calculated in the same manner as in the above process using 
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the value of CC. 

Otherwise, instead of using the value prescribed by 
the MPEG-2 coding system, users may directly describe the 
value of the scrambling key identifier in the area where 
5 the application is not specified but which users can 
utilize freely, such as private data area in the Adaptation 
Field. 

• (Constructions of Reception Apparatus and Security Module) 
The reception apparatus shown in FIG . 19 is made up 
Q 10 of a TS separation unit 201, an HDD 202, a scrambling key 

5? sap 

fil list holding unit 203, a descrambling process unit 701, 

|y 

p and a reproduction unit 205. 

i m 

it The descrambling process unit 701 descrambles the 

;\ scrambled content stored in the HDD 202, based on the 

*J 15 scrambling key list held by the scrambling key list holding 
unit 203 and passes it to the reproduction unit 205. 

FIG. 22 shows the detailed construction of the 
descrambling process unit 701. 

The descrambling process unit 701 shown in FIG. 22 
20 is made up of a TS packet extraction unit 710, a scrambling 
key identifier calculation unit 711, a descrambling unit 
712, and a scrambling key list interpretation unit 713. 

The TS packet extraction unit 710 extracts the 
scrambled content stored in the HDD 202 one TS packet at 
25 a time to pass it to the descrambling unit 712. Also, the 
TS packet extraction unit 710 reads the value of the CC 
in the extracted TS packet to pass it to the scrambling 
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key identifier calculation unit 711. 

The scrambling key identifier calculation unit 711 
calculates a scrambling key identifier from the value of 
the CC passed from the TS packet extraction unit 710 and 
passes it to the scrambling key list interpretation unit 
713. 

The scrambling key list interpretation unit 713 
extracts the scrambling key corresponding to the TS packet 
to be scrambled from the scrambling key list stored in the 
scrambling key list holding unit 203, based on the 
scrambling key identifier passed from the scrambling key 
identifier calculation unit 711, and passes it to the 
descrambling unit 712. 

The descrambling unit 712 descrambles one TS packet 
passed from the TS packet extraction unit 710 using the 
scrambling key passed from the scrambling key list 
interpretation unit 713 and passes it to the reproduction 
unit 205. The descrambling unit 712 repeats this process 
until all TS packets have been processed. 
<Operations> 

(Operations of Broadcast Apparatus) 

FIG. 23 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 600 according to the 
third embodiment of the invention. Note that the same 
numerals are assigned to the step where the same processes 
as in FIG. 9 are conducted, and explanation for them has 
been omitted. 
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Following describes the outline of the procedure in 
the broadcasting process, with reference to FIG . 23. 

(1) Same as the step (1) in FIG. 9 (Step SI) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 

(4) Same as the step (4) in FIG. 9 (Step S4) 

(5) The scrambling process unit 601 scrambles the 
content converted into TS packets by the TS packetizing 
unit 101, based on the scrambling key list generated by 
the scrambling key list generation unit 102 (Step S51) . 

(6) Same as the step (6) in FIG. 9 (Step S6) 

(7) Same as the step (7) in FIG. 9 (Step S7) 
FIG. 24 shows a procedure in the scrambling process 

by means of the scrambling process unit 601 in detail. 

Following describes the outline of the detailed 
procedure in the scrambling process, with reference to FIG. 
24. 

(1) The TS packet header interpretation unit 611 
judges whether there are any unprocessed TS packets or 
not (Step S61 ) . If there are not any unprocessed TS packets, 
the scrambling process ends. 

(2) If there are unprocessed TS packets, the TS packet 
header interpretation unit 611 acquires one unprocessed 
TS packet to pass it to the scrambling unit 613, and reads 
the value of the CC to pass it to the scrambling key 
identifier calculation unit 610 (Step S62). 

(3) The scrambling key identifier calculation unit 
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610 calculates a scrambling key identifier from the value 
of the CC passed from the TS packet header interpretation 
unit 611 to pass it to the scrambling key list 
interpretation unit 614 (Step S63) . 

(4) The scrambling key list interpretation unit 614 
extracts the scrambling key corresponding to the TS packet 
now being processed, from the scrambling key list stored 
in the scrambling key list holding unit 612, based on the 
scrambling key identifier passed from the scrambling key 
identifier calculation unit 610 and passes the extracted 
key to the scrambling unit 613 (Step S64). 

(5) The scrambling unit 613 scrambles one TS packet 
passed from the TS packet header interpretation unit 611 
using the scrambling key passed from the scrambling key 
list interpretation unit 614 and passes it to the 
multiplexing unit 105, Then, the procedure returns upward 
to process the successive TS packet (Step S65) 
(Operations of Reception Apparatus) 

Explanation of the procedure in the reception and 
storage processes by means of the reception apparatus 700 
and the security module 300 according to the third 
embodiment of the invention has been omitted, because they 
are the same as in the first embodiment. 

FIG. 25 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 700 and the security module 300 
according to the third embodiment of the invention. Note 
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that the same numerals are assigned to the step where the 
same processes as in FIG. 12 are conducted, and explanation 
for them has been omitted. 

Following describes the outline of the procedure in 
the reproduction process, with reference to FIG. 25. 

(1) Same as the step (1) in FIG. 12 (Step S31) 

(2) Same as the step (2) in FIG. 12 (Step S32) 

(3) The descrambling process unit 701 descrambles the 
scrambled content stored in the HDD 202 based on the 
scrambling key list held by the scrambling key list holding 
unit 203 and passes the descrambled content to the 
reproduction unit 205 (Step S71) . 

(4) Same as the step (4) in FIG. 12 (Step S34) 
FIG. 26 shows a procedure in the descrambling process 

by means of the descrambling process unit 701 in detail. 

Following describes the outline of the detailed 
procedure in the descrambling process, with reference to 
FIG. 26. 

(1) The TS packet extraction unit 710 judges whether 
there are any unprocessed TS packets or not (Step S81) . 
If there are no any unprocessed TS packets, the 
descrambling process ends. 

(2) If there are unprocessed TS packets, the TS packet 
extraction unit 710 extracts one unprocessed TS packet to 
pass it to the scrambling unit 712, and reads the value 
of the CC of the extracted TS packet to pass it to the 
scrambling key identifier calculation unit 711 (Step S82) . 
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(3) The scrambling key identifier calculation unit 
711 calculates a scrambling key identifier from the value 
of the CC passed from the TS packet extraction unit 710 
and passes it to the scrambling key list interpretation 
unit 713 (Step S83) . 

(4) The scrambling key list interpretation unit 713 
extracts the scrambling key from the scrambling key list 
stored in the scrambling key list holding unit 203, based 
on the scrambling key identifier passed from the scrambling 
key identifier calculation unit 711 and passes the 
extracted key to the descrambling unit 712 (Step S84) . 

(5) The descrambling unit 712 descrambles one TS 
packet passed from the TS packet extraction unit 710 using 
the scrambling key passed from the scrambling key list 
interpretation unit 713 and passes the descrambled TS 
packet to the reproduction unit 205. Then, the procedure 
returns upward to process the successive TS packet (Step 
S85) . 

As stated above, according to the third embodiment 
of the invention, various particular reproduction 
processes can be realized by extracting a scrambling key 
corresponding to any one of TS packets from the scrambling 
key list using the value of CC, 

Note that, instead of the value of CC, any one of the 
number of TS packets, the cumulative amount of data, a 
relative reproduction time, and an identifier for a 
scrambling key may be used. 
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Embodiment 4 
<Summary> 

A system for providing a storage service according 
to the fourth embodiment of the invention consists of a 
broadcast apparatus, a reception apparatus, and a security 
module . 

Unlike the first embodiment, the broadcast apparatus 
according to the fourth embodiment does not generate the 
scrambling key list. Instead, the broadcast apparatus in 
this embodiment adds auxiliary information including 
identifying information on the scrambled content such as 
packet numbers so as to help the reception apparatus to 
generate a scrambling key list, the scrambling keys, and 
the like, to the normal reproduction ECM to broadcast it 
together with the scrambled content. 

The security module, which is set and integrated with 
the reception apparatus in a predetermined position, 
receives the normal reproduction ECM and the scrambled 
content, stores the scrambled content while generating a 
scrambling key list based on the auxiliary information 
added to the normal reproduction ECM, and sequentially 
descrambles the scrambled content using the stored 
scrambling key list. 
<Overall Construction> 

FIG. 27 shows the construction of a system for 
providing a storage service according to the fourth 
embodiment of the invention. 
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The system shown in FIG, 27 is made up of a broadcast 
apparatus 800, a reception apparatus 900, and a security 
module 1000. 

The security module 1000 is a portable and 
intelligent recording medium such as an IC card. The 
security module 1000 is set in a predetermined position 
of the reception apparatus 900 and used together with the 
reception apparatus 900. 

Note that construction elements which have the same 
functions as those in the first embodiment have been given 
the same reference numerals and the same names and their 
explanation has been omitted. 
(Construction of Broadcast Apparatus) 

The broadcast apparatus 800 shown in FIG. 27 is made 
up of a TS packetizing unit 101, an auxiliary information 
generation unit 801, a scrambling process unit 802, an ECM 
generation unit 803, a multiplexing unit 804, a content 
acquisition unit 106, and a scrambling key acquisition unit 
107. 

The auxiliary information generation unit 801 
generates auxiliary information based on the scrambling 
key acquired by the scrambling key acquisition unit 107. 

Note that the auxiliary information is represented 
by scrambling key list generation descriptors, for 
example . 

FIG. 28 shows one example of the data structure of 
the scrambling key list generation descriptor. 
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The scrambling key list descriptor shown in FIG. 28 
includes a scrambling key identifier (Ks_id) for 
identifying a scrambling key, the scrambling key(Ks), and 
the number of TS packets to be scrambled with the scrambling 
key (TS_packet_number ) . 

The scrambling process unit 802 scrambles the content 
converted into TS packets by the TS packetizing unit 101, 
based on the auxiliary information generated by the 
auxiliary information generation unit 801. The detailed 
description on the scrambling process unit 802 will be 
given later. 

The ECM generation unit 8 03 generates a normal 
reproduction ECM, and adds the auxiliary information 
generated by the auxiliary information generation unit 801 
to the normal reproduction ECM. 

FIG. 2 9 shows one example of the data structure 
of a normal reproduction ECM, to which the scrambling key 
list generation descriptor is added. 

The normal reproduction ECM shown in FIG. 2 9 is 
generated by adding the scrambling key list generation 
descriptor as described above to a variable portion (a 
target to be encoded) in the main body of the ECM as 
prescribed by the ARIB (The Association of Radio Industries 
and Businesses) standard. 

The multiplexing unit 804 associates/attaches the 
scrambled content with/to the generated normal 
reproduction ECM to produce a TS, and broadcasts the TS . 
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FIG. 30 shows the detailed construction of the 
scrambling process unit 802. 

The scrambling process unit 802 shown in FIG. 30 is 
made up of a TS packet counting unit 810, an auxiliary 
5 information holding unit 811, a scrambling unit 812, and 
an auxiliary information interpretation unit 813. 

The TS packet counting unit 810 acquires the content 
converted into TS packets by the TS packetizing unit 101 
one TS packet at a time and passes it to the scrambling 

O 10 unit 812. The TS packet counting unit 110 also counts the 

C3 

fU TS packet cumulative number showing the ordinal position 

W 

p of the acquired TS packet counted from the beginning of 

j,i the content, and passes the number to the auxiliary 

information interpretation unit 813. The TS packet 
15 counting unit 810 resets the TS packet cumulative number 

hi 

;i into zero when other content starts to be processed. 

* The auxiliary information holding unit 811 acquires 

and holds the auxiliary information generated by the 
auxiliary information generation unit 801. 
20 The auxiliary information interpretation unit 813 

extracts the scrambling key corresponding to the TS packet 
to be scrambled from the auxiliary information stored in 
the auxiliary information holding unit 811, based on the 
TS packet cumulative number passed from the TS packet 
25 counting unit 810, and passes the extracted key to the 
scrambling unit 812. 

The scrambling unit 812 scrambles one TS packet 



passed from the TS packet counting unit 810 using the 
scrambling key passed from the auxiliary information 
interpretation unit 813 and passes the scrambled TS packet 
to the multiplexing unit 804. The scrambling unit 812 
repeats this process until all TS packets have been 
processed, 

(Constructions of Reception Apparatus and Security Module) 

The reception apparatus 900 shown in FIG. 27 is made 
up of a TS separation unit 901, an HDD 902, a scrambling 
key list generation unit 903, a scrambling key list holding 
unit 904, a descrambling process unit 905, and a 
reproduction unit 205. 

The security module 1000 shown in FIG. 27 is made 
up of an ECM interpretation unit 1001. 

The TS separation unit 901 receives the TS broadcast 
by the multiplexing unit 804, and separates a normal 
reproduction ECM and scrambled content. 

The HDD 902 is a recording medium such as a hard 
disk drive. The HDD 902 stores the normal reproduction 
ECM and the scrambled content separated by the TS 
separation unit 901. 

The ECM interpretation unit 1001 extracts auxiliary 
information from the stored normal reproduction ECM. 

The scrambling key list generation unit 903 
generates a scrambling key list based on the auxiliary 
information extracted by the ECM interpretation unit 1001 . 

The scrambling key list holding unit 904 holds the 
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scrambling key list generated by the scrambling key list 
generation unit 903. 

The descrambling process unit 905 descrambles the 
scrambled content stored in the HDD 202 based on the 
scrambling key list held by the scrambling key list holding 
unit 904, and passes the descrambled content to the 
reproduction unit 205. 

FIG. 31 shows the detailed construction of the 
descrambling process unit 905. 

The descrambling unit 905 shown in FIG. 31 is made 
up of a TS packet extraction unit 910, a descrambling unit 
911, and a scrambling key list interpretation unit 912. 

The TS packet extraction unit 910 extracts the 
scrambled content stored in the HDD 902 one TS packet at 
a time and passes it to the descrambling unit 911. The 
TS packet extraction unit 910 also counts the TS packet 
index showing the ordinal position of the acquired TS 
packet counted from the beginning of the content, and 
passes the number to the scrambling key list interpretation 
unit 912. The TS packet extraction unit 910 resets the 
TS packet index into zero when other content starts to be 
processed. 

The scrambling key list interpretation unit 912 
extracts the scrambling key corresponding to the TS packet 
index passed from the TS packet extraction unit 910 from 
the scrambling key list held by the scrambling key list 
holding unit 904, and passes the extracted key to the 
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de scrambling unit 911. 

The descrambling unit 911 descrambles one TS packet 
passed from the TS packet extraction unit 910 using the 
scrambling key extracted by the scrambling key list 
interpretation unit 912 and passes the descrambled TS 
packet to the reproduction unit 205. The descrambling 
unit 911 repeats this process until all TS packets have 
been processed. 
<Operations> 

(Operations of Broadcast Apparatus) 

FIG. 32 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 800 according to the 
fourth embodiment of the invention. 

Following describes the outline of the procedure in 
the broadcast process, with reference to FIG. 32. 

(1) Same as the step (1) in FIG. 9 (Step SI) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 

(4) The auxiliary information generation unit 801 
generates auxiliary information based on the scrambling 
key acquired by the scrambling key acquisition unit 107 
(Step S91) . 

(5) The scrambling process unit 802 scrambles the 
content converted into TS packets by the TS packetizing 
unit 101, based on the auxiliary information generated by 
the auxiliary information generation unit 801 (Step S92) . 

(6) The ECM generation unit 8 03 generates a normal 
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reproduction ECM and adds the auxiliary information 
generated by the auxiliary information generation unit 801 
to the normal reproduction ECM (Step S93) - 

(7) The multiplexing unit 804 associates/attaches 
the generated normal reproduction ECM with/to the 
scrambled content to produce TS and broadcasts the TS (Step 
S94) . 

FIG. 33 shows a procedure in the scrambling process 
by means of the scrambling process unit 802 in detail. 

Following describes the outline of the detailed 
procedure in the scrambling process, with reference to FIG. 
33. 

(1) The TS packet counting unit 810 resets the TS 
packet cumulative number into zero (Step S101). 

(2) The TS packet counting unit 810 judges whether 
there are any unprocessed TS packets or not (Step S102) . 
If there are no any unprocessed TS packets, the scrambling 
process ends. 

(3) If there are unprocessed TS packets, the TS packet 
counting unit 810 acquires one unprocessed TS packet to 
pass it to the scrambling unit 812, and counts the TS packet 
cumulative number to pass it to the auxiliary information 
interpretation unit 813 (Step S103) . 

(4) The auxiliary information interpretation unit 
813 extracts the scrambling key corresponding to the TS 
packet now being processed from the auxiliary information 
stored in the auxiliary information holding unit 811, based 
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on the TS packet cumulative number passed from the TS packet 
counting unit 810 (Step S104). 

(5) The scrambling unit 812 scrambles one TS packet 
passed from the TS packet counting unit 810 using the 
scrambling key passed from the auxiliary information 
interpretation unit 813 and passes it to the multiplexing 
unit 804. Then, the procedure returns upward to process 
the successive TS packet (Step S105) . 
(Operations of Reception Apparatus) 

FIG, 34 shows a procedure in the reception and storage 
processes by means of the reception apparatus 900 and the 
security module 1000 according to the fourth embodiment 
of the invention. 

Following describes the outline of the processes with 
reference to FIG. 34. 

( 1 ) The TS separation unit 901 receives a TS broadcast 
by the multiplexing unit 804 . Then, the TS separation unit 
901 separates a normal reproduction ECM and scrambled 
content (Step Sill) . 

(2) The HDD 2 02 stores the normal reproduction ECM 
and the scrambled content separated by the TS separation 
unit 901 (Step S112) . 

(3) The ECM interpretation unit 1001 extracts the 
auxiliary information from the normal reproduction ECM 
(Step S113) . 

(4) The scrambling key list generation unit 903 
generates a scrambling key list, based on the auxiliary 
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information extracted by the ECM interpretation unit 1001 
(Step S114) . 

(5) The scrambling key list holding unit 904 holds 
the scrambling key list generated by the scrambling key 
5 list generation unit 903 (Step S115) . 

Note that, the normal reproduction ECM and the 
scrambled content may be separated not at this stage but 
' later (e.g., before using them). 

FIG. 35 shows a procedure in the reproduction process 

J s 

0 10 after the reception and storage processes by means of the 
fy reception apparatus 900 and the security module 1000 

□ according to the fourth embodiment of the invention. Note 

[l that the same numerals are assigned to the step where the 

same processes as in FIG. 12 are conducted, and explanation 
! y 15 for them has been omitted. 

p Following describes the outline of the reproduction 

process, with reference to FIG. 35. 

( 1 ) The descrambling process unit 905 descrambles the 
scrambled content stored in the HDD 902 based on the 

20 scrambling key list held by the scrambling key list holding 
unit 904 and passes the descrambled content to the 
reproduction unit 205 (Step S121) . 

(2) Same as the step (4) in FIG. 12 (Step S34) 
FIG. 3 6 shows a procedure in the descrambling process 

25 by means of the descrambling process unit 905 in detail. 

Following describes the outline of the detailed 
procedure in the descrambling process, with reference to 
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FIG. 36. 

(1) The TS packet extraction unit 910 resets the TS 
packet index into zero when other content starts to be 
processed (Step S131) . 

(2) The TS packet extraction unit 910 judges whether 
there are unprocessed TS packets or not (Step S132) . If 
there are not any unprocessed TS packet, the descrambling 
process ends. 

(3) If there are unprocessed TS packets, the TS packet 
extraction unit 910 extracts one unprocessed TS packet to 
pass it to the descrambling unit 911. Also, the TS packet 
extraction unit 910 counts the TS packet index to pass it 
to the scrambling key list interpretation unit 912 (Step 
S133) . 

(4) The scrambling key list interpretation unit 912 
extracts the scrambling key corresponding to the TS packet 
index passed from the TS packet extraction unit 910, from 
the scrambling key list held by the scrambling key list 
holding unit 904, and passes the extracted key to the 
descrambling unit 911 (Step S134). 

(5) The descrambling unit 911 descrambles one TS 
packet passed from the TS packet extraction unit 910 using 
the scrambling key extracted by the scrambling key list 
interpretation unit 912 and passes the descrambled TS 
packet to the reproduction unit 205. Then, the procedure 
returns upward to process the successive TS packet (Step 
S135) . 
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In the fourth embodiment, in the case that a user has 
not made a contract to receive the content before receiving 
the content, the generated scrambling key list 
may be encoded and recorded, and then after making the 
contract the list may be decoded so as to be used. 
Alternatively, instead of generating the scrambling key 
list, all normal reproduction ECMs including auxiliary 
information may be stored when receiving the content, and 
then, after making the contract, the ECM interpretation 
unit 1001 may extract each piece of auxiliary information 
from all normal reproduction ECMs to generate the 
scrambling key list. 

As described above, according to the fourth 
embodiment of the invention, various particular 
reproduction processes can be realized by extracting a 
scrambling key corresponding to any one of TS packets from 
the scrambling key list generated based on the auxiliary 
information when/after storing the scrambled content or 
the like. 

Note here that the auxiliary information may be added 
to a storage ECM. 

Embodiment 5 
<Summary> 

A system for providing a storage service according 
to the fifth embodiment of the invention consists of a 
broadcast apparatus, a reception apparatus, and a security 
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module . 

Unlike the first embodiment, the broadcast apparatus 
according to the fifth embodiment does not generate the 
scrambling key list. The broadcast apparatus in this 
embodiment broadcasts scrambled content together with 
normal reproduction ECMs . 

The security module, which is set and integrated with 
the reception apparatus in a predetermined position, 
receives the normal reproduction ECM and the scrambled 
content, stores the scrambled content while generating a 
scrambling key list based on the normal reproduction ECM, 
and sequentially descrambles the scrambled content using 
the stored scrambling key list* 
<Overall Construction> 

FIG. 37 shows the construction of a system for 
providing a storage service according to the fifth 
embodiment of the invention. 

The system shown in FIG. 37 is made up of a broadcast 
apparatus 1100, a reception apparatus 1200, and a security 
module 1300. 

The security module 1300 is a portable and 
intelligent recording medium such as an IC card. The 
security module 1300 is set in a predetermined position 
of the reception apparatus 1200 and used together with the 
reception apparatus 1200. 

Note that construction elements which have the same 
functions as those in the first embodiment have been given 
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the same reference numerals and their explanation has been 
omitted. 

(Construction of Broadcast Apparatus) 

The broadcast apparatus 1100 shown in FIG. 37 is made 
up of a TS packetizing unit 101, a scrambling process unit 
1101, an ECM generation unit 1102, a multiplexing unit 1103, 
a content acquisition unit 106, and a scrambling key 
■ acquisition unit 107. 

The scrambling process unit 1101 scrambles the 
content converted into TS packets by the TS packetizing 
unit 101, based on the scrambling key acquired by the 
scrambling key acquisition unit 107. Note that 
explanation of the scrambling process by the scrambling 
process unit 1101 has been omitted, because the scrambling 
process is conducted in the same manner as in the current 
BS digital broadcasting system. 

The ECM generation unit 1102 generates normal 
reproduction ECMs including scrambling keys acquired by 
the scrambling key acquisition unit 107. 

The multiplexing unit 1103 associates/attaches the 
generated normal reproduction ECMs with/to the scrambled 
content to produce a TS and broadcasts the TS. 
(Constructions of Reception Apparatus and Security Module) 

The reception apparatus shown in FIG. 37 is made up 
of a TS separation unit 1201, a key changing judgement unit 
1202, a key update judgement unit 1203, an HDD 1204, a 
scrambling key list generation unit 1205, a scrambling key 
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list holding unit 1206, a descrambling process unit 1207, 
and a reproduction unit 205. 

The security module shown in FIG. 37 is made up of 
an ECM interpretation unit 1301. 

The TS separation unit 1201 receives a TS broadcast 
by the multiplexing unit 1103, and separates normal 
reproduction ECMs and scrambled content. 

Here, scrambling keys are classified into even number 
keys and odd number keys . 

FIG. 38 is a schematic diagram showing changes in the 
scrambling keys and timing for updating normal 
reproduction ECMs . 

As shown in FIG. 38, one normal reproduction ECM 
transmits an even number key and an odd number key. When 
updating the normal reproduction ECM, either odd number 
key or even number key, which is not being used, is updated. 
Therefore, changes in the scrambling keys can be detected 
by the timing of changes between odd number keys and even 
number keys. 

FIG. 39 is a schematic diagram showing changes 
between an even number key and an odd number key, and timing 
for updating normal reproduction ECMs. The scrambling 
control flag (note here that this term eguals "transport 
scrambling control" prescribed in the MPEG-2 standard) 
shown in FIG. 39 is described in the TS packet header, which 
shows the state of the scrambling of the corresponding TS 
packet as follows. That is, in the case that the flag value 
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is "00", scrambling is not performed, in the case of the 
flag value is "10", scrambling is performed using an even 
number key, and in the case that the flag value is "11", 
scrambling is performed using an odd number key. 

As shown in FIG. 39, timing for changes between even 
number keys and odd number keys can be detected by change 
in the flag value of the scrambling control flag (CD and 
® in FIG. 39) . The timing for updating of normal 
reproduction ECMs can be detected by the version number 
of the normal reproduction ECMs (<D in FIG. 39) . 

The key changing judgement unit 1202 counts the TS 
packet index indicating the ordinal position of the TS 
packet received by the TS separation unit 1201. The key 
changing judgement unit 1202 also checks the scrambling 
control flag in the TS packet header to judge whether the 
scrambling is performed by an even number key or an odd 
number key so as to detect the timing for changing in 
scrambling keys and the timing for ending of the storage. 

The key update judgement unit 1203, firstly, has the 
HDD 1204 store the normal reproduction ECM separated by 
the TS separation unit 1201 therein. Each time a normal 
reproduction ECM is newly separated, the key update 
judgement unit 1203 judges whether the new normal 
reproduction ECM is the same as the stored normal 
reproduction ECM. In the case that they are not the same 
with each other, the key update judgement unit 1203 has 
the HDD 1204 overwrite the normal reproduction ECM stored 
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in the HDD 1204 with the new normal reproduction ECM. 

The HDD 1204 is a recording medium such as a hard disk 
drive. The HDD 1204 stores the scrambled content 
separated by the TS separation unit 1201 and the normal 
reproduction ECM passed by the key update judgement unit 
1203. 

The ECM interpretation unit 1301, at the timing for 
changing scrambling keys detected by the key changing 
judgement unit 1202, extracts the scrambling key that has 
been used until now and the scrambling key that will be 
used from now on, from the normal reproduction ECM stored 
in the HDD 1204, based on the judgement by the key changing 
judgement unit 1202, and passes the scrambling keys to the 
scrambling key list generation unit 1205. 

The scrambling key list generation unit 1205 
generates a scrambling key list, based on the TS packet 
index passed from the key changing judgement unit 1202 and 
the scrambling keys passed from the ECM interpretation unit 
1301. 

Following describes the processes for monitoring 
changes in scrambling keys and for generating the 
scrambling key list in detail. 

FIG. 40 shows a transition of the scrambling key list 
generated. 

As shown in FIG. 40, the scrambling key list is not 
updated at the timing of updating a normal reproduction 
ECM (<D in FIG. 39), but underlined information shown in 



82 



this figure is added thereto at the timing of changes 
between odd number keys and even number keys (CD and ® in 
FIG. 39) . 

The scrambling key list holding unit 1206 holds the 
scrambling key list generated by the scrambling key list 
generation unit 1205. 

The descrambling process unit 1207 descrambles the 
scrambled content stored in the HDD 1204, based on the 
scrambling key list held by the scrambling key list holding 
unit 1206, and passes the descrambled content to the 
reproduction unit 205. 

FIG. 41 shows the detailed construction of the 
descrambling unit 1207. 

The descrambling process unit 1207 shown in FIG. 41 
is made up of a TS packet extraction unit 1210, a 
descrambling unit 1211, and a scrambling key list 
interpretation unit 121. 

The TS packet extraction unit 1210 extracts the 
scrambled content stored in the HDD 1204 one TS packet at 
a time, and passes the extracted content to the 
descrambling unit 1211. The TS packet extraction unit 
1210 also counts the TS packet index indicating the ordinal 
position of the extracted TS packet counted from the 
beginning of the content, and passes the TS packet index 
to the scrambling key list interpretation unit 1212. The 
TS packet extraction unit 1210 resets the TS packet index 
into zero when other content starts to be processed. 
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The scrambling key list interpretation unit 1212 
extracts the scrambling key corresponding to the TS packet 
index passed from the TS packet extraction unit 1210, from 
the scrambling key list held by the scrambling key list 
holding unit 1204, and passes the extracted key to the 
descrambling unit 1211. 

The descrambling unit 1211 descrambles one TS packet 
passed from the TS packet extraction unit 1210 using the 
scrambling key extracted by the scrambling key list 
interpretation unit 1212, and passes the descrambled TS 
packet to the reproduction unit 205. The descrambling 
unit 1211 repeats this process until all TS packets have 
been processed. 
<Operations> 

(Operations of Broadcast Apparatus) 

FIG. 42 shows a procedure in the broadcasting process 
by means of the broadcast apparatus 1100 according to the 
fifth embodiment of the invention. Note that the same 
numerals are assigned to the step where the same processes 
as in FIG. 9 are conducted, and explanation for them has 
been omitted. 

Following describes the outline of the procedure in 
the broadcast process, with reference to FIG. 42. 

(1) Same as the step (1) in FIG. 9 (Step SI) 

(2) Same as the step (2) in FIG. 9 (Step S2) 

(3) Same as the step (3) in FIG. 9 (Step S3) 

(4) The scrambling process unit 1101 scrambles the 
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content converted into TS packets by the TS packetizing 
unit 101 , based on the scrambling key acquired by the 
scrambling key acquisition unit 107 (Step S141) . 

(5) The ECM generation unit 1102 generates a normal 
5 reproduction ECM including the scrambling key acquired by 

the scrambling key acquisition unit 107 (Step S142) . 

(6) The multiplexing unit 1103 associates/attaches 
" the generated normal reproduction ECM with/to the 

scrambled content to produce a TS and broadcasts the TS 
Jjj 10 (Step S143) . 

(Operations of Reception Apparatus) 

W 

y FIG. 43 shows a procedure in the reception and storage 

fy 

H processes by means of the reception apparatus 1200 and the 

M- security module 1300 according to the fourth embodiment 

\* 15 of the invention. 

W 

Q Following describes the outline of the procedure in 

the reception and storage processes, with reference to FIG. 
43. 

(1) The TS separation unit 1201 receives the first 
20 TS packet broadcast by the multiplexing unit 1103, and 

separates a normal reproduction ECM and scrambled content 
(Step S151) . 

(2) The key update judgement unit 1203 has the HDD 
1204 store the normal reproduction ECM of the first TS 

25 packet separated by the TS separation unit 1201 therein 
(Step S152) . 

(3) The key changing judgement unit 1202 judges 



85 



whether or not to complete the reception and storage 
processes (Step S153) . 

(4) If the reception and storage processes should not 
be completed, the TS separation unit 121 receives the 
following one TS packet broadcast by the multiplexing unit 
1103, and separates a normal reproduction ECM and scrambled 
content (Step S154) . 

(5) The HDD 1204 stores the scrambled content 
separated by the TS separation unit 1201 (Step S155) . 

(6) The key changing judgement unit 1202 counts the 
TS packet index indicating the ordinal position of the TS 
packet received by the TS separation unit 1201. The key 
changing judgement unit 1202 also checks the scrambling 
control flag in the TS packet header to judge whether the 
scrambling is performed by an even number key or an odd 
number key (Step S156) - 

(7) The key changing judgement unit 1202 judges 
whether it is the timing for changing scrambling keys or 
not (Step S157) . 

(8) If it is the timing for changing scrambling keys, 
the key changing judgement unit 1202 passes the counted 
TS packet index to the scrambling key list generation unit 
1205 (Step S158) . 

(9) The ECM interpretation unit 1301 extracts the 
scrambling key extracts the scrambling key that has been 
used until now and the scrambling key that will be used 
from now on, from the normal reproduction ECM stored in 



the HDD 1204, based on the judgement by the key changing 
judgement unit 1202, and passes the scrambling keys to the 
scrambling key list generation unit 1205 (Step S159) . 

(10) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS packet 
index passed from the key changing judgement unit 1202 and 
the scrambling keys passed from the ECM interpretation unit 
1301 (Step S1510) . 

(11) The key update judgement unit 1203 judges 
whether the normal reproduction ECM separated by the TS 
separation unit 1202 is the same as the stored normal 
reproduction ECM (Step S1511) . If they are the same with 
each other, the procedure returns upward (to Step S153) 
to process the successive TS packet (Step S1512) . 

(12) If they are not the same with each other, the 
key update judgement unit 1203 has the HDD 1204 overwrite 
the normal storage ECM stored therein with the new normal 
reproduction ECM. Then, the procedure returns upward (to 
Step S153) to process the successive TS packet (Step S1512) 

(13) If the reception and storage processes should 
be completed, the key changing judgement unit 1202 passes 
the counted TS packet index to the scrambling key list 
generation unit 1205 (Step S1513) • 

(14) The scrambling key list generation unit 1205 
updates the scrambling key list, based on the TS packet 
index passed from the key changing judgement unit 1202 to 
complete the scrambling key list (Step S1514) . 
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(15) The scrambling key list holding unit 1206 holds 
the scrambling key list generated by the scrambling key 
list generation unit 1205 (Step S1515) • 

In the case that the reception and storage processes 
are completed without any changes in scrambling keys, the 
ECM interpretation unit 1301 extracts the scrambling key 
that has been used until now from the normal reproduction 
ECM stored in the HDD 1204, based on the judgement by the 
key changing judgement unit 1202, and passes the extracted 
key to the scrambling key list generation unit 1205 . Then, 
the scrambling key list generation unit 1205 updates the 
scrambling key list, based on the TS packet index passed 
from the key changing judgement unit 1202 and the 
scrambling key passed from the ECM interpretation unit 1301 
to complete the scrambling key list. 

In addition, instead of separating normal 
reproduction ECM and scrambled content from each other when 
receiving them, but they may be separated before using to 
generate the scrambling key list. 

FIG. 44 shows a procedure in the reproduction process 
after the reception and storage processes by means of the 
reception apparatus 1200 and the security module 1300 
according to the fifth embodiment of the invention. Note 
that the same numerals are assigned to the step where the 
same processes as in FIG. 12 are conducted, and explanation 
for them has been omitted. 

Following describes the outline of the procedure in 
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the reproduction process, with reference to FIG. 44. 

(1) The descrambling process unit 1205 descrambles 
the scrambled content stored in the HDD 1204, based on the 
scrambling key list held by the scrambling key list holding 
unit 1206, and passes the descrambled content to the 
reproduction unit 205 (Step S161) . 

(2) Same as the step (4) in FIG. 12 (Step S34) 
FIG. 45 shows a procedure in the descrambling process 

by means of the descrambling process unit 1207 in detail. 

Following describes the outline of the detailed 
procedure in the descrambling process, with reference to 
FIG. 45. 

(1) The TS packet extraction unit 1210 resets the TS 
packet index into zero when other content starts to be 
processed (Step S171) . 

(2) The TS packet extraction unit 1210 judges whether 
there are unprocessed TS packets or not (Step S172) . If 
there are not any unprocessed TS packet, the descrambling 
process ends. 

(3) If there are unprocessed TS packets, the TS packet 
extraction unit 1210 extracts one unprocessed TS packet 
to pass it to the descrambling unit 1211. Also, the TS 
packet extraction unit 1210 counts the TS packet index to 
pass it to the scrambling key list interpretation unit 1212 
(Step S173) . 

(4) The scrambling key list interpretation unit 1212 
extracts the scrambling key corresponding to the TS packet 
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index passed from the TS packet extraction unit 1210, from 
the scrambling key list held by the scrambling key list 
holding unit 1204 and passes the extracted key to the 
descrambling unit 1211 (Step S174). 

(5) The descrambling unit 1211 descrambles one TS 
packet passed from the TS packet extraction unit 1210 using 
the scrambling key extracted by the scrambling key list 
interpretation unit 1212 and passes the descrambled TS 
packet to the reproduction unit 205. Then, the procedure 
returns upward to process the successive TS packet (Step 
S175) . 

In the fifth embodiment, in the case that a user has 
not made a contract to receive the content before receiving 
the content, the generated scrambling key list 
may be encoded and recorded, and after making the contract 
the list can be decoded so as to be used. Alternatively, 
instead of generating the scrambling key list, all normal 
reproduction ECMs maybe stored when receiving the content, 
and then, after making the contract, the ECM interpretation 
unit 1001 may generate the scrambling key list from all 
the normal reproduction ECMs. 

As described above, according to the fifth embodiment 
of the invention, various particular reproduction 
processes can be realized by extracting a scrambling key 
corresponding to any one of TS packets from the scrambling 
key list generated when/after storing scrambled content 
or the like. 
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Further, in order to improve the speed of the 
particular reproduction processes realized by selectively 
reproducing I pictures only, the I picture as a target may 
be extracted based on an I picture list, where the I picture 
5 list is generated in the same manner for generating the 
scrambling key list in the above-described embodiments. 
The I picture list is represented by an I picture list 
■ descriptor, for example. 

|»* FIG. 4 6 shows one example of the data structure of 

O 

g 10 an I picture list descriptor. 

fff 

p The I picture list descriptor shown in FIG. 46 

includes an I picture identifier (Ipic id) for identifying 
I pictures, the number of TS packets counted from the 

If, beginning of the file which indicates the position of the 

ry 

H; 15 first packet of the I picture ( f irst_packet_position) , and 

O the number of TS packets counted form the beginning of the 

is 

file which indicates the position of the last packet of 
the I picture (last_packet_j?osition) . In the list, the 
I picture identifiers (Ipic_id) , the number of TS packets 

20 { f irstjpacket_position) , and the number of TS packets 

(last_packet_position) are described as much as the number 

of I pictures. 

(Modifications) 

In some of the above-described embodiments, the 

25 scrambling key list is delivered by the same route as that 
for the scrambled content. However, the scrambling key 
list may be delivered by another route, for example, by 
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recording the list onto recording media such as a CD-ROM 
and delivering the recording media, or by means of another 
communication method such as the Internet and telephone* 
In some of the above-described embodiments, the TS 
5 packet corresponding to the scrambling key is specified 
based on the number of TS packets. However, the TS packet 
may be specified by another method. For example, this may 
■ be based on the cumulative amount of data in the TS packet, 
a relative reproduction time from the beginning of the 
0 10 content. Alternatively, the TS packet may be specified 
tj by an identifier for the scrambling key, which is embedded 

0 for each TS packet in advance. 

ft] 

M> In each of the above-described embodiments, the 

scrambling keys are acquired from the database in the 

1 If 

|.I 15 broadcast station. However, the scrambling keys may be 

g generated before scrambling process. 

Each of the above-described embodiments does not 
especially limit the timing for generating the scrambling 
key list. For instance, at the side of the broadcast 
20 apparatus, the list may be generated before scrambling, 
at the time of scrambling, or after scrambling. At the 
side of the reception apparatus, the list may be generated 
at any time before using the list in the descrambling 
process . 

25 Besides, computer programs to have a computer execute 

the procedure of the above-described embodiments may be 
recorded on computer-readable recording media or may be 
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directly transferred on the network to be distributed and 
sold. 

These recording media can be, for example, removable 
recording media such as a floppy disk, a compact disk, a 
magnet optical disk, a DVD disk, and a memory card and fixed 
recording media such as hard disk, semiconductor memory. 

Although the present invention has been fully 
described by way of examples with reference to the 
accompanying drawings, it is to be noted that various 
changes and modifications will be apparent to those skilled 
in the art. Therefore, unless such changes and 
modifications depart from the scope of the present 
invention, they should be construed as being included 
therein. 
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